<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3767">
<package pkgid="395c0de4ef4487d968cb18a3f4c01ff6c8244cb3ccc60b3c6d94905a178da20d" name="Box2D-devel" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.1-14" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 2.3.1-15" date="1596542400">- Fix FTBFS.</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 2.4.0-1" date="1597060800">- 2.4.0 with patch for cmake shared libs.</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 2.4.1-1" date="1603108800">- 2.4.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.1-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 2.4.1-3" date="1612958400">- Use make macros</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.4.1-4" date="1613563200">- reduce unnecessary dependencies</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 2.4.1-5" date="1613563201">- disable building BOX2D_BUILD_UNIT_TESTS due to "SIGSTKSZ ... no
  longer constant on Linux ... redefined to sysconf(_SC_SIGSTKSZ)"
  https://github.com/bminor/glibc/blob/master/NEWS causing build failure</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.1-6" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.1-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="623cfcfd82146654203faae32559f65977a3e1078f1a4f00faab93aaa8db3b32" name="HdrHistogram_c-devel" arch="aarch64">
  <version epoch="0" ver="0.11.0" rel="6.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zapletal 0.9.11-1" date="1565784000">- Initial package version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.11-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Lukas Zapletal &lt;lzap+rpm@redhat.com&gt; - 0.9.12-1" date="1581508800">- New upstream version</changelog>
  <changelog author="Nathan Scott &lt;nathans@redhat.com&gt; - 0.9.13-1" date="1588161600">- New upstream version</changelog>
  <changelog author="Lukas Zapletal &lt;lzap+rpm@redhat.com&gt; - 0.11.0-1" date="1592827200">- New upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.0-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.0-3" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.0-4" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.11.0-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.11.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1722dee0a082b2077fc328811c6d01733dc4c262c1c925499d22b57a136bc810" name="LibRaw-devel" arch="aarch64">
  <version epoch="0" ver="0.21.1" rel="2.el9_8.1"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.21.1-2" date="1777377600">- Fix CVE-2026-21413 and CVE-2026-24450
Resolves: RHEL-165374, RHEL-165461</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.21.1-2.1" date="1785412800">- Fix CVE-2026-51235
Resolves: RHEL-219221</changelog>
</package>
<package pkgid="f290da618b83f99e00e4506422d3c1f9a255e35542568f982e8fed9db5d1c607" name="LibRaw-devel" arch="aarch64">
  <version epoch="0" ver="0.21.1" rel="2.el9_8"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.21.1-2" date="1777291200">- Fix CVE-2026-21413 and CVE-2026-24450
Resolves: RHEL-165373, RHEL-165456</changelog>
</package>
<package pkgid="e99296d6df24ed473977d4fbf89c5817f0f2c94fb91afb0d1bcbefc2a0ed1a6b" name="LibRaw-samples" arch="aarch64">
  <version epoch="0" ver="0.21.1" rel="2.el9_8.1"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.21.1-2" date="1777377600">- Fix CVE-2026-21413 and CVE-2026-24450
Resolves: RHEL-165374, RHEL-165461</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.21.1-2.1" date="1785412800">- Fix CVE-2026-51235
Resolves: RHEL-219221</changelog>
</package>
<package pkgid="91615608e5ae5699dd2f758716c603d9811e2c1ba8bb60551f52ddcc85584eba" name="LibRaw-samples" arch="aarch64">
  <version epoch="0" ver="0.21.1" rel="2.el9_8"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.21.1-2" date="1777291200">- Fix CVE-2026-21413 and CVE-2026-24450
Resolves: RHEL-165373, RHEL-165456</changelog>
</package>
<package pkgid="1c5708d7c404c2ca8a2fa4f6c9ca0ac3f920d29aea4b3eaa5205583272255201" name="LibRaw-static" arch="aarch64">
  <version epoch="0" ver="0.21.1" rel="2.el9_8.1"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.21.1-2" date="1777377600">- Fix CVE-2026-21413 and CVE-2026-24450
Resolves: RHEL-165374, RHEL-165461</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.21.1-2.1" date="1785412800">- Fix CVE-2026-51235
Resolves: RHEL-219221</changelog>
</package>
<package pkgid="28810b605db4e96f552770814f7f195c776d6a35f0d0869616e607bbf0ecc574" name="LibRaw-static" arch="aarch64">
  <version epoch="0" ver="0.21.1" rel="2.el9_8"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.21.1-2" date="1777291200">- Fix CVE-2026-21413 and CVE-2026-24450
Resolves: RHEL-165373, RHEL-165456</changelog>
</package>
<package pkgid="b638472ec91cd76d2f779e7d61cb723acc522b9ea43eccd58f2276b53d8c7249" name="ModemManager-vala" arch="aarch64">
  <version epoch="0" ver="1.20.2" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.10-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.10-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-5" date="1629374400">- enable polkit support to allow normal users to access modems (rh #1995186)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.14.10-6" date="1629460800">- depend ModemManager on polkit package (rh #1995186)</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1.18.0-1" date="1631534400">- Update to 1.18.0</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-1" date="1633608000">- Upgrade to 1.18.2</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-2" date="1639137600">- Include libqrtr-glib build dependency (rh #1996716)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.18.2-3" date="1639569600">- Rebuild to update libqmi's libqrtr support (rh #2032807)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.20.2-1" date="1669118400">- Update to 1.20.2</changelog>
</package>
<package pkgid="ba79d82ab65614c73e7ea7a9e7665fb7b545d6ce3fdadcad729a6b4ef6818333" name="OpenIPMI-perl" arch="aarch64">
  <version epoch="0" ver="2.0.36" rel="1.el9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.36-1" date="1724673600">- Update to 2.0.36</changelog>
</package>
<package pkgid="21e6c6a9b043dd6caba5c6562b6b3ebf487f625b2c432c695eac957f44c501d5" name="PEGTL-devel" arch="aarch64">
  <version epoch="0" ver="2.8.3" rel="4.el9"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.8.1-1" date="1570795200">- Update to 2.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.1-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.8.3-1" date="1599134400">- Update to 2.8.3
Resolves: rhbz#1742557</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.3-2" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.3-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4c981dadb37555d10b592c4c54bdb798d405ec2f7af92887c34f2eeafb97b495" name="PackageKit-cron" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="2.el9_8"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.2.6-2" date="1777291200">- Backport fix for CVE-2026-41651.
- Resolves: #RHEL-170504</changelog>
</package>
<package pkgid="deaee0fa305aaf04587123692aa57f157bac12ce631769345dc092caa9500926" name="PyQt-builder" arch="noarch">
  <version epoch="0" ver="1.12.2" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.12.2-1" date="1652097600">- Initial package
  Resolves: bz#2081238</changelog>
</package>
<package pkgid="ac4a2cd19431373b70526fc2aa769ac7acb797b9c4bef2438b2e8184a354ac14" name="aardvark-dns-tests" arch="aarch64">
  <version epoch="2" ver="1.17.0" rel="1.el9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-1" date="1731499200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.14.0-1" date="1739188800">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0
- Related: RHEL-60277</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-2" date="1740657600">- rebuilt to try TMT tests in osci
- Resolves: RHEL-80816</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-3" date="1741953600">- fix dep issues in tests subpackage
- Resolves: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.15.0-1" date="1747224000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-1" date="1755259200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.0-1" date="1763121600">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0
- Resolves: RHEL-85839</changelog>
</package>
<package pkgid="34abfc5cc710e2453b9730360fd9f575c4479efb40e4e0788fc4b3766036cbc8" name="aardvark-dns-tests" arch="aarch64">
  <version epoch="2" ver="1.17.1" rel="1.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.13.1-1" date="1731499200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.13.1
- Related: RHEL-60277</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.14.0-1" date="1739188800">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.14.0
- Related: RHEL-60277</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-2" date="1740657600">- rebuilt to try TMT tests in osci
- Resolves: RHEL-80816</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@fedoraproject.org&gt; - 2:1.14.0-3" date="1741953600">- fix dep issues in tests subpackage
- Resolves: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.15.0-1" date="1747224000">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.15.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.16.0-1" date="1755259200">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.16.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.0-1" date="1763121600">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.0
- Resolves: RHEL-85839</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 2:1.17.1-1" date="1777982400">- update to https://github.com/containers/aardvark-dns/releases/tag/v1.17.1
- Resolves: RHEL-170152</changelog>
</package>
<package pkgid="708c08cc3d51b22411390bc31b700398276a735808d71401e893a107297cd76b" name="adcli-doc" arch="noarch">
  <version epoch="0" ver="0.9.3.1" rel="3.el9"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-1" date="1765972800">- Rebase to latest upstream version
  Resolves: RHEL-134944
  Resolves: RHEL-134945
  Resolves: RHEL-134946
  Resolves: RHEL-134947
  Resolves: RHEL-134948
  Resolves: RHEL-134950
  Resolves: RHEL-134951
  Resolves: RHEL-134952</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-2" date="1766491200">- Add explicit selinux dependencies to avoid policycoreutils-python-utils dependency
  Resolves: RHEL-134944</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.9.3.1-3" date="1766491201">- Fix issue with restoring SELinux file label
  Resolves: RHEL-134944</changelog>
</package>
<package pkgid="454c27b72a2bb99a38bc31b03c34917d7a96c2107d9704efbcf0f81c2af6725a" name="adobe-mappings-cmap-devel" arch="noarch">
  <version epoch="0" ver="20171205" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20171205-7" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 20171205-8" date="1584360000">- remove mention of Fedora from desc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20171205-9" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20171205-10" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20171205-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20171205-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="83848fb473937226b1af0e0fc2ba3a4863a94d41eb23b5a50a4fd6c7675c12ad" name="adobe-mappings-pdf-devel" arch="noarch">
  <version epoch="0" ver="20180407" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20180407-5" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 20180407-6" date="1584360000">- remove mention of Fedora from desc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20180407-7" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20180407-8" date="1611576000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20180407-9" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20180407-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="74f7c6c46e4d038190618b921f403c6993b5ef01f95d2aaf970094e2d11d974c" name="al-signing-client" arch="noarch">
  <version epoch="0" ver="0.1" rel="3.el9"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 0.1-1" date="1741089600">- Initial package</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 0.1-2" date="1741089601">- Only install rpm-sign on s390x and ppc64le</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 0.1-3" date="1772798400">- Make package noarch
- Add rsadgstsign support</changelog>
</package>
<package pkgid="4c0ca72299d0e42cb26b5e498c744eda8c6491a649403c1ccacaf6c73be5137b" name="almalinux-bookmarks" arch="noarch">
  <version epoch="0" ver="9" rel="1.el9.alma.1"/>
</package>
<package pkgid="8af7c69c9cc105023fe379703483ef58763201fcc078f184a3ee530b9142412f" name="alsa-sof-firmware-debug" arch="noarch">
  <version epoch="0" ver="2025.12.2" rel="1.el9"/>
  <changelog author="Jaroslav Kysela &lt;jkysela@redhat.com&gt; - 2024.03-5" date="1718625600">- Update to v2024.03
- Add AVS topology files v2024.02</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09-1" date="1728907200">- Update to v2024.09</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09.1-1" date="1731326400">- Update to v2024.09.1</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09.2-1" date="1733486400">- Update to v2024.09.2</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2024.09.2-3" date="1734523200">- Add sof-ipc4-lib directory</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2025.05-1" date="1750939200">- Update to v2025.05</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 2025.12.2-1" date="1769515200">- Update to v2025.12.2</changelog>
</package>
<package pkgid="6807b4332f3142dbde852da4aeaed26af6051d1ff8e61d277b2df5768dad6fa2" name="alsa-topology" arch="noarch">
  <version epoch="0" ver="1.2.15.3" rel="1.el9"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1718452800">- update to alsa-lib 1.2.12 and alsa-ucm-conf 1.2.12</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-2" date="1734350400">- update to alsa-lib 1.2.13 and alsa-ucm-conf 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-1" date="1750939200">- update to alsa-lib 1.2.14 and alsa-ucm-conf 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.3-1" date="1767873600">- update to alsa-lib 1.2.15.3 and alsa-ucm-conf 1.2.15.3</changelog>
</package>
<package pkgid="c184b372e4c7d2d906bc1caa1d71b5dde5acd18ca980884f52acc48aebbba144" name="alsa-topology-utils" arch="aarch64">
  <version epoch="0" ver="1.2.15.2" rel="1.el9"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1720094400">* Updated to 1.2.12</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-1" date="1733659200">* Updated to 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-2" date="1751371200">* Updated to 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.2-1" date="1769083200">* Updated to 1.2.15.2</changelog>
</package>
<package pkgid="0b76d2f19b42e5ddc487d5f17345e6bcc877870d3ca4ed8685e5bb6a8f94bc6e" name="alsa-ucm-utils" arch="aarch64">
  <version epoch="0" ver="1.2.15.2" rel="1.el9"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1720094400">* Updated to 1.2.12</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-1" date="1733659200">* Updated to 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-2" date="1751371200">* Updated to 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.2-1" date="1769083200">* Updated to 1.2.15.2</changelog>
</package>
<package pkgid="bde189c6fe16498256fe75499ef13f8853257be7dbec3c17cbcc17fe97ee299f" name="alsa-utils-alsabat" arch="aarch64">
  <version epoch="0" ver="1.2.15.2" rel="1.el9"/>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.12-1" date="1720094400">* Updated to 1.2.12</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.13-1" date="1733659200">* Updated to 1.2.13</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.14-2" date="1751371200">* Updated to 1.2.14</changelog>
  <changelog author="Jaroslav Kysela &lt;perex@perex.cz&gt; - 1.2.15.2-1" date="1769083200">* Updated to 1.2.15.2</changelog>
</package>
<package pkgid="c0b7585ccf4bf6487ccea705848fdd8dbf51553a858a4fcde53f35fd6ddc5d0c" name="ant" arch="noarch">
  <version epoch="0" ver="1.10.12" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 1.10.11-1" date="1631188800">- Add Obsoletes for removed apache-log4j subpackage to fix upgrades</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.11-2" date="1634126400">- Bump release</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.12-1" date="1636459200">- Update to upstream version 1.10.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.12-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.10.12-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.12-4" date="1650628800">- Fix FTBFS with JUnit 5.8.x</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.12-5" date="1654257600">- Fix integer overflow when parsing SOURCE_DATE_EPOCH</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.12-6" date="1654516800">- Rebuild to fix incorrect version string
- Resolves: rhbz#1936159</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.12-7" date="1657800000">- Skip running ImageIOTest test</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.12-8" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e16121a141ba5082a577403d31c820a5590e9b7d9be70554db8c60fdfa26330f" name="ant" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="18.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-10" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-11" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-12" date="1733140800">- Exclude ant-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-13" date="1733140801">- Add test plan for ant-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-14" date="1733140802">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-15" date="1733140803">- Use smaller jlink image</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-16" date="1733227200">- Fix ant-manual license field</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-17" date="1733313600">- Exclude several subpackages from unbound test plan</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-18" date="1735819200">- Drop Obsoletes on ant-javamail</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.15-19" date="1736510400">- Import from Fedora</changelog>
</package>
<package pkgid="b2a2f657e3c03ed7dbab207c1dfb4ce7262126f1e43d10bb1ceca8d48785d6d8" name="ant-imageio" arch="noarch">
  <version epoch="0" ver="1.10.9" rel="15.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.9-8" date="1718280000">- Fix test failures due to JPEG CMYK support in OpenJDK
- Resolves: RHEL-5354</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-9" date="1729080000">- Add OpenJDK bindings
- Resolves: RHEL-62405</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-10" date="1731067200">- Add OpenJDK bindings in a separate configuration file
- Resolves: RHEL-62405</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-11" date="1732190400">- Fix the usage ot patch macro</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-12" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-13" date="1732363200">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-14" date="1732449600">- Fix test declarations</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.9-15" date="1734004800">- Implement new Java bindings and fix ant-manual license
- Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519</changelog>
</package>
<package pkgid="aa1e57ac89d9728f40fe84f3afc0249eecf6ed522ae3f5dde0f8f20feb631b49" name="ant-javadoc" arch="noarch">
  <version epoch="0" ver="1.10.9" rel="15.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.9-8" date="1718280000">- Fix test failures due to JPEG CMYK support in OpenJDK
- Resolves: RHEL-5354</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-9" date="1729080000">- Add OpenJDK bindings
- Resolves: RHEL-62405</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-10" date="1731067200">- Add OpenJDK bindings in a separate configuration file
- Resolves: RHEL-62405</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-11" date="1732190400">- Fix the usage ot patch macro</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-12" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-13" date="1732363200">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.9-14" date="1732449600">- Fix test declarations</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.9-15" date="1734004800">- Implement new Java bindings and fix ant-manual license
- Resolves: RHEL-68742, RHEL-68743, RHEL-68744, RHEL-68745, RHEL-69519</changelog>
</package>
<package pkgid="9dab45ce167e711ee79c04e3ee15757cd5cd77d82cf64e155c4e58640d40eb99" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.10.12" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 1.10.11-1" date="1631188800">- Add Obsoletes for removed apache-log4j subpackage to fix upgrades</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.11-2" date="1634126400">- Bump release</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.12-1" date="1636459200">- Update to upstream version 1.10.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.12-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.10.12-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.12-4" date="1650628800">- Fix FTBFS with JUnit 5.8.x</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.12-5" date="1654257600">- Fix integer overflow when parsing SOURCE_DATE_EPOCH</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.12-6" date="1654516800">- Rebuild to fix incorrect version string
- Resolves: rhbz#1936159</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.12-7" date="1657800000">- Skip running ImageIOTest test</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.12-8" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="d903bb10ac6a30653c00053d73aa11e8ae2e45e2ab770bc79917cdc29c6c891c" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="18.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-10" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-11" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-12" date="1733140800">- Exclude ant-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-13" date="1733140801">- Add test plan for ant-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-14" date="1733140802">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-15" date="1733140803">- Use smaller jlink image</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-16" date="1733227200">- Fix ant-manual license field</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-17" date="1733313600">- Exclude several subpackages from unbound test plan</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-18" date="1735819200">- Drop Obsoletes on ant-javamail</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.15-19" date="1736510400">- Import from Fedora</changelog>
</package>
<package pkgid="80eea78d9657416281b31312fcabcb9a327e8cd0a7fa6dbfa000bdb23da56e6a" name="ant-lib" arch="noarch">
  <version epoch="0" ver="1.10.12" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 1.10.11-1" date="1631188800">- Add Obsoletes for removed apache-log4j subpackage to fix upgrades</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.11-2" date="1634126400">- Bump release</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.12-1" date="1636459200">- Update to upstream version 1.10.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.12-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.10.12-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.12-4" date="1650628800">- Fix FTBFS with JUnit 5.8.x</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.12-5" date="1654257600">- Fix integer overflow when parsing SOURCE_DATE_EPOCH</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.12-6" date="1654516800">- Rebuild to fix incorrect version string
- Resolves: rhbz#1936159</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.12-7" date="1657800000">- Skip running ImageIOTest test</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.12-8" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="f4619275d0da1b1596b5c425073196f78020f4df8464f3ceed478aa9989ac4d3" name="ant-lib" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="18.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-10" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-11" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-12" date="1733140800">- Exclude ant-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-13" date="1733140801">- Add test plan for ant-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-14" date="1733140802">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-15" date="1733140803">- Use smaller jlink image</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-16" date="1733227200">- Fix ant-manual license field</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-17" date="1733313600">- Exclude several subpackages from unbound test plan</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-18" date="1735819200">- Drop Obsoletes on ant-javamail</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.15-19" date="1736510400">- Import from Fedora</changelog>
</package>
<package pkgid="46bee9eb13d2a8884aac9bc126df26a4ccaa9bb5bf4f48e2a6a310b9cbf91c22" name="ant-openjdk21" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="18.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-10" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-11" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-12" date="1733140800">- Exclude ant-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-13" date="1733140801">- Add test plan for ant-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-14" date="1733140802">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-15" date="1733140803">- Use smaller jlink image</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-16" date="1733227200">- Fix ant-manual license field</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-17" date="1733313600">- Exclude several subpackages from unbound test plan</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-18" date="1735819200">- Drop Obsoletes on ant-javamail</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.15-19" date="1736510400">- Import from Fedora</changelog>
</package>
<package pkgid="d7c6a1ce9ca33c13d2c4c35baaa6707567b8c0d1304970272a81867a53383d27" name="ant-unbound" arch="noarch">
  <version epoch="0" ver="1.10.15" rel="18.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-10" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-11" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-12" date="1733140800">- Exclude ant-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-13" date="1733140801">- Add test plan for ant-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-14" date="1733140802">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-15" date="1733140803">- Use smaller jlink image</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-16" date="1733227200">- Fix ant-manual license field</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-17" date="1733313600">- Exclude several subpackages from unbound test plan</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.15-18" date="1735819200">- Drop Obsoletes on ant-javamail</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.15-19" date="1736510400">- Import from Fedora</changelog>
</package>
<package pkgid="18edc5c7f9ad6bf3ff40805a68dc534224b8ecfa858ee776ba9ccd62bf31902a" name="antlr-javadoc" arch="noarch">
  <version epoch="0" ver="2.7.7" rel="73.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.7-69" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.7-70" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.7-71" date="1732276800">- Rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.7-72" date="1732449600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.7-73" date="1733313600">- set javac source / target version to 1.8 to fix issues with Java 11</changelog>
</package>
<package pkgid="cd3e10debe12e0206111ddc2c6eee50f4122327d7a04dfe441d5a265a3505b70" name="antlr-manual" arch="noarch">
  <version epoch="0" ver="2.7.7" rel="73.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.7-69" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.7-70" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.7-71" date="1732276800">- Rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.7-72" date="1732449600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.7-73" date="1733313600">- set javac source / target version to 1.8 to fix issues with Java 11</changelog>
</package>
<package pkgid="aba02315396922c6fcb4d3b4b77179c9738a9368bfb574797815c96ce67e72ef" name="aopalliance" arch="noarch">
  <version epoch="0" ver="1.0" rel="51.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-32" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-33" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-34" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-35" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-36" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-37" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.0-38" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.0-39" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-40" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-49" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="9e08a5c2a19a967ae7fe10e10303ce5395e11b802ffe7e6142cac1dadddd12f2" name="aopalliance-javadoc" arch="noarch">
  <version epoch="0" ver="1.0" rel="51.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-32" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-33" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-34" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-35" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-36" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-37" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.0-38" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.0-39" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-40" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-49" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="0a6f6bbc0977ca3fc2bec3dafb97c8c74450eefa0d98b7af35033547bfb93523" name="aopalliance-javadoc" arch="noarch">
  <version epoch="0" ver="1.0" rel="51.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-32" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-33" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-34" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-35" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-36" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-37" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.0-38" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.0-39" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.0-40" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.0-49" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="40b2e76afe064ee112f585b6287c6196820a5acc268425826e49df6fc45026c4" name="apache-commons-beanutils" arch="noarch">
  <version epoch="0" ver="1.9.4" rel="11.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-7" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-8" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.9.4-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-11" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="459fa2f4a2519add19f51fef9d5295ec3d8a8330d5f3df02f575968d1399e063" name="apache-commons-beanutils" arch="noarch">
  <version epoch="0" ver="1.9.4" rel="36.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-15" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-16" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-17" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.9.4-18" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.9.4-19" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-20" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-21" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-33" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-34" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="d8f3ca72272eeb86b961326ee4ad748dc7b45912cffcf19515c3d58803716cfc" name="apache-commons-beanutils-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.4" rel="10.el9_6"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt;" date="1749816000">- Fix improper access control vulnerability
- Resolves: CVE-2025-48734</changelog>
</package>
<package pkgid="0543bb2dfe7e284ddc0735a2cefc62167ec059a933bb4c797739144ac478e44c" name="apache-commons-beanutils-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.4" rel="11.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-7" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-8" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.9.4-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-11" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="17bf6c3a1b47ce4fd0f24cd0c2839cc4c873ffa05ec0239eb81f763be6fe8886" name="apache-commons-beanutils-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.4" rel="36.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-15" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-16" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-17" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.9.4-18" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.9.4-19" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-20" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-21" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-33" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.4-34" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="2fb361ae043a49c7b5fcd282e5a26903152f8dc5515cfcbcc060fedc791b2a3b" name="apache-commons-cli" arch="noarch">
  <version epoch="0" ver="1.5.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-11" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.4-13" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-14" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Christian Schuermann &lt;spike@fedoraproject.org&gt; 1.5.0-1" date="1636027200">- Update to upstream version 1.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.5.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-4" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="135ce74a3cb8d1cb25573bece87243f6ac9831cbabba1551a4d5d71c4647eedc" name="apache-commons-cli" arch="noarch">
  <version epoch="0" ver="1.9.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.6.0-1" date="1701691200">- Update to upstream version 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.6.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.6.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.8.0-1" date="1721131200">- Update to upstream version 1.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.0-1" date="1724414400">- Update to upstream version 1.9.0
- Resolves: rhbz#2305042</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.0-2" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.0-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="8aca83f28df4ab37d026bd4853b2ddb06dae51672b87e799daedb2ef1685595e" name="apache-commons-cli-javadoc" arch="noarch">
  <version epoch="0" ver="1.4" rel="20.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.4-17" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4-18" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4-19" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4-20" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="875f10f04f10aa725a627eeeb84e38c880c43a887a42b0d17ce0d50f4329d374" name="apache-commons-cli-javadoc" arch="noarch">
  <version epoch="0" ver="1.5.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-11" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.4-13" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-14" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Christian Schuermann &lt;spike@fedoraproject.org&gt; 1.5.0-1" date="1636027200">- Update to upstream version 1.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.5.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-4" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="fcac3f42c8962b3cf54278d1df20237b8435f2e914f32f2cd0711230de3ed6e4" name="apache-commons-cli-javadoc" arch="noarch">
  <version epoch="0" ver="1.5.0" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.5.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-4" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.5.0-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="33d50a63f2a723785dabfe2997082e262398f068ce1ea1cd2348d8ac11182c33" name="apache-commons-cli-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.6.0-1" date="1701691200">- Update to upstream version 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.6.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.6.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.8.0-1" date="1721131200">- Update to upstream version 1.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.0-1" date="1724414400">- Update to upstream version 1.9.0
- Resolves: rhbz#2305042</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.0-2" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.0-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="ce08652b690dd6981c1a5dfaaa70d1ad9d5e424469182166b03e76c355a9b109" name="apache-commons-cli-javadoc" arch="noarch">
  <version epoch="0" ver="1.9.0" rel="4.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.6.0-1" date="1701691200">- Update to upstream version 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.6.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.6.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.8.0-1" date="1721131200">- Update to upstream version 1.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.0-1" date="1724414400">- Update to upstream version 1.9.0
- Resolves: rhbz#2305042</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.0-2" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9.0-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="59ed54965e7ad8b06c3a74c2a18e6342b588a555e957d590742dac69800d1377" name="apache-commons-codec" arch="noarch">
  <version epoch="0" ver="1.15" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.15-1" date="1599220800">- Update to latest upstream release</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.15-1" date="1599825600">- Update to upstream version 1.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.15-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-4" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-5" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.15-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-7" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="eceabc98a5e7ba5818e86f33cf1810de70cd777dcefd1bb72c9cf68323c3cf48" name="apache-commons-codec" arch="noarch">
  <version epoch="0" ver="1.17.1" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.0-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.16.0-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.16.0-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.16.1-1" date="1712059200">- Update to upstream version 1.16.1</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.17.1-1" date="1721131200">- Update to upstream version 1.17.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.1-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.1-6" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.1-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="435fbd0b166822c2e321522dc7a36f4e72b729796f6a558c9c04f7e2b920c867" name="apache-commons-codec-javadoc" arch="noarch">
  <version epoch="0" ver="1.15" rel="10.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.15-7" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.15-8" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.15-9" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.15-10" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="ce01aa963062e101a190ff6303201d6d6a175cbc8a9777849d9d7a574e24bc0b" name="apache-commons-codec-javadoc" arch="noarch">
  <version epoch="0" ver="1.15" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.15-1" date="1599220800">- Update to latest upstream release</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.15-1" date="1599825600">- Update to upstream version 1.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.15-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-4" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-5" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.15-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-7" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="894533a0ce343afc4cb42a6062843d1930ae3763664c76ebdad6d14a855a39da" name="apache-commons-codec-javadoc" arch="noarch">
  <version epoch="0" ver="1.15" rel="8.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.15-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-7" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.15-8" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="66fc4583a53cdbd386b5a6bfd8c597ca99d0129821e9c570769457304363b848" name="apache-commons-codec-javadoc" arch="noarch">
  <version epoch="0" ver="1.17.1" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.0-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.16.0-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.16.0-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.16.1-1" date="1712059200">- Update to upstream version 1.16.1</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.17.1-1" date="1721131200">- Update to upstream version 1.17.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.1-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.1-6" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.1-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="85f5e4c0e70f8a3c8fa7d2b444b487ebb0a1a81460856657073c909945b14ceb" name="apache-commons-codec-javadoc" arch="noarch">
  <version epoch="0" ver="1.17.1" rel="8.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.0-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.16.0-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.16.0-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.16.1-1" date="1712059200">- Update to upstream version 1.16.1</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.17.1-1" date="1721131200">- Update to upstream version 1.17.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.1-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.1-6" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.1-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1f310dbd213d4e8aece236fc1c23e9631135af26198ae3786fea6453f173e061" name="apache-commons-collections" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="28.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-20" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 3.2.2-22" date="1614945600">- Backport fix to build with maven-antrun-plugin 3.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-23" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-24" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-25" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-26" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-27" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-28" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="923ee65720f95cc88ec39548bbb65056b1c26ac2f6926841a1153e8200133954" name="apache-commons-collections" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="53.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-30" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-31" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-32" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-33" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-34" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.2-35" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-36" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-37" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-51" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-52" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="f8203920100fb158b405237fef155367c93e3ef670c6e3a61ee5ee5b867afa27" name="apache-commons-collections-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="26.el9"/>
  <changelog author="Roland Grunberg &lt;rgrunber@redhat.com&gt; - 3.2.2-17" date="1593086400">- Fix ambiguous reference in AbstractTestCollection to build on Java 11.</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.2.2-18" date="1593172800">- Rebuild to verify xmvn/maven switch to jakarta-annotations.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-19" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-20" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 3.2.2-22" date="1614945600">- Backport fix to build with maven-antrun-plugin 3.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-23" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-24" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-25" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.2-26" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="beea206c6a73d4ec41cd37309d17e7f45b64931b7ec27fbf23a155bf41c442fb" name="apache-commons-collections-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="28.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-20" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 3.2.2-22" date="1614945600">- Backport fix to build with maven-antrun-plugin 3.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-23" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-24" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-25" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-26" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-27" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-28" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="60de9eedc056ab06e14c62a27f7ad0b145f64216304293b37d846a5ba01444d4" name="apache-commons-collections-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="53.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-30" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-31" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-32" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-33" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-34" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.2-35" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-36" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-37" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-51" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-52" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="fad46a26cd870a9738efc59b8cbbcdb4c7adc35075ebf6446d6c1b17373c31cf" name="apache-commons-collections-testframework" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="26.el9"/>
  <changelog author="Roland Grunberg &lt;rgrunber@redhat.com&gt; - 3.2.2-17" date="1593086400">- Fix ambiguous reference in AbstractTestCollection to build on Java 11.</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.2.2-18" date="1593172800">- Rebuild to verify xmvn/maven switch to jakarta-annotations.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-19" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-20" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 3.2.2-22" date="1614945600">- Backport fix to build with maven-antrun-plugin 3.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-23" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-24" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-25" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.2-26" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c58fad83af159ac9d7dff9a816f528ad83ecfd1fd5c364ca11c8464fe72428f0" name="apache-commons-collections-testframework" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="28.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-20" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 3.2.2-22" date="1614945600">- Backport fix to build with maven-antrun-plugin 3.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-23" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-24" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-25" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-26" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-27" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-28" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="0ac7cdf44dda7fb12bd4d69bebb4a2c030e5abeea652bcd32f4ca7396dbcdcd1" name="apache-commons-collections-testframework" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="53.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-30" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-31" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-32" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-33" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-34" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.2-35" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-36" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-37" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-51" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-52" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e527a1fafe33ebf2ca2602d2ce4d0ba97cc107b6c79a660e37f79a185fc92cfd" name="apache-commons-compress" arch="noarch">
  <version epoch="0" ver="1.21" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.20-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20-7" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.21-1" date="1628251200">- Update to upstream version 1.21</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.21-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.21-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.21-4" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="69e7be3212d6041261bb0b0d445d1c5c2dbaa8effdbb007a32416caac109d09a" name="apache-commons-compress" arch="noarch">
  <version epoch="0" ver="1.27.1" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.25.0-1" date="1702036800">- Update to upstream version 1.25.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.25.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.25.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-6" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.25.0-7" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27.1-1" date="1724414400">- Update to upstream version 1.27.1
- Resolves: rhbz#2283072</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27.1-2" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27.1-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="fb59142af0e8d43f6b5975d5a122d20db741f8a0e2c7adae6277bafbcca235d4" name="apache-commons-compress-javadoc" arch="noarch">
  <version epoch="0" ver="1.21" rel="3.el9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.20-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.20-3" date="1594900800">- Ensure Java 8 level bytecode when built on Java 11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.20-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.20-7" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.20-8" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.21-1" date="1628251200">- Update to upstream version 1.21</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.21-2" date="1628251201">- Add missing BuildRequires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.21-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="67957b34cf1531d0c382edb7c7d8d7279b5dc05025a639ec0516bbe5720fcfc3" name="apache-commons-compress-javadoc" arch="noarch">
  <version epoch="0" ver="1.21" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.20-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20-7" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.21-1" date="1628251200">- Update to upstream version 1.21</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.21-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.21-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.21-4" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="74c9c9e229ef20289472282f7ab0b388e9d17bb8365b6a6518cffef48f24f454" name="apache-commons-compress-javadoc" arch="noarch">
  <version epoch="0" ver="1.27.1" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.25.0-1" date="1702036800">- Update to upstream version 1.25.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.25.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.25.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.25.0-6" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.25.0-7" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27.1-1" date="1724414400">- Update to upstream version 1.27.1
- Resolves: rhbz#2283072</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27.1-2" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27.1-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="6eb6d7bf042da90fa2ff386e5b540fc486609f5b7cda915aecbc3401753cad2b" name="apache-commons-io" arch="noarch">
  <version epoch="1" ver="2.11.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:2.8.0-1" date="1600430400">- Update to upstream version 2.8.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1:2.8.0-1" date="1602849600">- Update to version 2.8.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1:2.8.0-3" date="1612353600">- Add patch to fix Files.size() failing when symlink target is non-existant</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.8.0-4" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8.0-5" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8.0-6" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:2.8.0-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.11.0-1" date="1650801600">- Update to upstream version 2.11.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.11.0-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="d6b2d30b81410d3b8795c79f96d1867459765d7674829386f58a6422816452da" name="apache-commons-io" arch="noarch">
  <version epoch="1" ver="2.16.1" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-3" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-4" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.13.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.13.0-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:2.13.0-7" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:2.13.0-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:2.16.1-1" date="1715947200">- Update to upstream version 2.16.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.16.1-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.16.1-6" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.16.1-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="5e9e06a4f03a6b1fe7f5838672c43b95bdfe184107050e040eddd10fdf79c0e6" name="apache-commons-io-javadoc" arch="noarch">
  <version epoch="1" ver="2.11.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:2.8.0-1" date="1600430400">- Update to upstream version 2.8.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1:2.8.0-1" date="1602849600">- Update to version 2.8.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1:2.8.0-3" date="1612353600">- Add patch to fix Files.size() failing when symlink target is non-existant</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.8.0-4" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8.0-5" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.8.0-6" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:2.8.0-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.11.0-1" date="1650801600">- Update to upstream version 2.11.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.11.0-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="8ff9d83e87409645e09ce2122320688cff54def201279d7737ab62c319dd3931" name="apache-commons-io-javadoc" arch="noarch">
  <version epoch="1" ver="2.11.0" rel="3.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:2.8.0-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.11.0-1" date="1650801600">- Update to upstream version 2.11.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.11.0-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.11.0-3" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="a729e6488df414cec39164e3d2c52df7c5b0d71d3f48877a1073d2f82ba56895" name="apache-commons-io-javadoc" arch="noarch">
  <version epoch="1" ver="2.16.1" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-3" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-4" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.13.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.13.0-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:2.13.0-7" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:2.13.0-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:2.16.1-1" date="1715947200">- Update to upstream version 2.16.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.16.1-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.16.1-6" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.16.1-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="f334fda497cb75863d7d0d97e7de7a4e558415d975ad838346c4b9b697517f84" name="apache-commons-io-javadoc" arch="noarch">
  <version epoch="1" ver="2.16.1" rel="9.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-3" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.13.0-4" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.13.0-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.13.0-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:2.13.0-7" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:2.13.0-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:2.16.1-1" date="1715947200">- Update to upstream version 2.16.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:2.16.1-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.16.1-6" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.16.1-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="624401e92c107dc5ac3f579beb495b124701d81e87c3bff641b5ff0cda623527" name="apache-commons-io-javadoc" arch="noarch">
  <version epoch="1" ver="2.8.0" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:2.8.0-8" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:2.8.0-9" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:2.8.0-10" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:2.8.0-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:2.8.0-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="55e7fd9e799eea54950b3d53342d0905bf99184325977dbebbab91b2ce2e5d3f" name="apache-commons-jxpath" arch="noarch">
  <version epoch="0" ver="1.3" rel="42.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-31" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-34" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3-35" date="1590148800">- Set javac -source and -target to 1.8.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-36" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-37" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-38" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-39" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-40" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-41" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3-42" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="789e6d26e293dcd5b3864523c0e15999f0eeefa0aa879841631dd1b170fa390e" name="apache-commons-jxpath" arch="noarch">
  <version epoch="0" ver="1.3" rel="44.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-37" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-38" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-39" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-40" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-41" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-42" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-43" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-44" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="47d8ac3d75fe4c7fcf1c1e69c586aeace285d3140d0be934fe873b5f00595745" name="apache-commons-jxpath" arch="noarch">
  <version epoch="0" ver="1.3" rel="73.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-47" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-48" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-49" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-50" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-51" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-52" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-53" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-54" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-71" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-72" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c8421d620dfc77d7252bdeb8e48e653d5650df1acfc4429088e7d83fa65da750" name="apache-commons-jxpath-javadoc" arch="noarch">
  <version epoch="0" ver="1.3" rel="42.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-31" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-34" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.3-35" date="1590148800">- Set javac -source and -target to 1.8.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-36" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-37" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-38" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-39" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-40" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-41" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3-42" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="27bc4c55674958eea2e68018358e481e55f8acd8010c6758235ffb00cad0aec4" name="apache-commons-jxpath-javadoc" arch="noarch">
  <version epoch="0" ver="1.3" rel="44.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-37" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-38" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-39" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-40" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-41" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-42" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-43" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-44" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="17764ba4aa2754af01f0a174f36bd58c685923f4ad6981b5dba81839952f4ff3" name="apache-commons-jxpath-javadoc" arch="noarch">
  <version epoch="0" ver="1.3" rel="73.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-47" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-48" date="1701691200">- Port to apache-commons-parent 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-49" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-50" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-51" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-52" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-53" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-54" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-71" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3-72" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="8ff00ef1d4cd4cea083b48f5f1d13e91f423007fd1b4d4be95040de36970cec6" name="apache-commons-lang3" arch="noarch">
  <version epoch="0" ver="3.12.0" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.11-1" date="1596542400">- Update to upstream version 3.11</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.11-1" date="1597233600">- Update to version 3.11.
- Fixes RHBZ#1699692</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.0-1" date="1615377600">- Update to upstream version 3.12.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.12.0-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.0-6" date="1651060800">- Workaround build issue with RPM 4.18</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-7" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="f424eda0a6cc79e953ca34baeba9d4db1775c6b23b7960c9ed97ce86a8027afa" name="apache-commons-lang3" arch="noarch">
  <version epoch="0" ver="3.17.0" rel="3.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.14.0-1" date="1702900800">- Update to upstream version 3.14.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.14.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.14.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.0-6" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.16.0-1" date="1724414400">- Update to upstream version 3.16.0
- Resolves: rhbz#2298535</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.16.0-2" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.17.0-1" date="1725537600">- Update to upstream version 3.17.0
- Resolves: rhbz#2309016</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.17.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b4d34e9c9bb3f22aa698bb7ffbe46ae8d744ac9f1a1d00c869c914b882cc851c" name="apache-commons-lang3-javadoc" arch="noarch">
  <version epoch="0" ver="3.12.0" rel="10.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.0-6" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.12.0-7" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.12.0-8" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.12.0-9" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.12.0-10" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="6ff0204f436555f991ca8dd4ed877890c8e2c3ac7707f924b074f765638def2f" name="apache-commons-lang3-javadoc" arch="noarch">
  <version epoch="0" ver="3.12.0" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.11-1" date="1596542400">- Update to upstream version 3.11</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.11-1" date="1597233600">- Update to version 3.11.
- Fixes RHBZ#1699692</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.0-1" date="1615377600">- Update to upstream version 3.12.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-4" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.12.0-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.0-6" date="1651060800">- Workaround build issue with RPM 4.18</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-7" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="38169e7f49075787c3f5c9a49502588d37d2577a152081799292234120fd5b9e" name="apache-commons-lang3-javadoc" arch="noarch">
  <version epoch="0" ver="3.12.0" rel="8.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.12.0-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.0-6" date="1651060800">- Workaround build issue with RPM 4.18</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.0-7" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.0-8" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="84154c19a45236243f6897ac4571eac095a73b74650a1e897e5ad4de65fa48b8" name="apache-commons-lang3-javadoc" arch="noarch">
  <version epoch="0" ver="3.17.0" rel="3.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.14.0-1" date="1702900800">- Update to upstream version 3.14.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.14.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.14.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.14.0-6" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.16.0-1" date="1724414400">- Update to upstream version 3.16.0
- Resolves: rhbz#2298535</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.16.0-2" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.17.0-1" date="1725537600">- Update to upstream version 3.17.0
- Resolves: rhbz#2309016</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.17.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="215226a876b5fbb5ef26a7ef822f6a801ac7c5af6e75517375da63fd6328791a" name="apache-commons-logging" arch="noarch">
  <version epoch="0" ver="1.2" rel="31.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-23" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.2-24" date="1599739200">- Build against log4j 2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-25" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2-26" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-27" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2-28" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-29" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-30" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-31" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="1900e63c0cb685d89bf82c94a2faafc8668da6df022de1422cd0423abf6a6722" name="apache-commons-logging" arch="noarch">
  <version epoch="0" ver="1.3.4" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-1" date="1701691200">- Update to upstream version 1.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-6" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.4-1" date="1724414400">- Update to upstream version 1.3.4
- Resolves: rhbz#2271286</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.4-2" date="1724414401">- In bootstrap mode build with log4j</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.4-3" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.4-4" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="ba228f7a241a4bbb03306eab54810f7639cbc79f252dfbe06195e2c461d3cffc" name="apache-commons-logging-javadoc" arch="noarch">
  <version epoch="0" ver="1.2" rel="31.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-23" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.2-24" date="1599739200">- Build against log4j 2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-25" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2-26" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-27" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2-28" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-29" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-30" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-31" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e5a9db0debceac6ae5347ee1dff4210f6a4a5383c6d61e775869166e8a9b391a" name="apache-commons-logging-javadoc" arch="noarch">
  <version epoch="0" ver="1.2" rel="33.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-30" date="1731931200">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-31" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-32" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-33" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="5f29512552f7dffc71be4336f5762034d7498b447c10e89f61aaba7bba7fbbbf" name="apache-commons-logging-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.4" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-1" date="1701691200">- Update to upstream version 1.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-6" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.4-1" date="1724414400">- Update to upstream version 1.3.4
- Resolves: rhbz#2271286</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.4-2" date="1724414401">- In bootstrap mode build with log4j</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.4-3" date="1725364800">- Use %autosetup -C</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.4-4" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="2e4ac222d17842bd5f85a6e37236fa3eee64b9db82100a49702d4cf9cbc657d2" name="apache-commons-net-javadoc" arch="noarch">
  <version epoch="0" ver="3.6" rel="17.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.6-15" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.6-16" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.6-17" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="854b42855a2cf90637a6417343f632f686377716f3293eef36f0bb7331bbe87b" name="apache-commons-parent" arch="noarch">
  <version epoch="0" ver="52" rel="6.el9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 47-5" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 47-6" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 51-1" date="1595937600">- Update to upstream version 51</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 52-1" date="1598011200">- Update to upstream version 52</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 52-1" date="1598961600">- Update to version 52.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 52-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 52-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 52-4" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 52-5" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 52-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="01aa4f484e30286e4ca766c41aaf1aa99383ce30e708e6e0d58f111ecd0ce327" name="apache-commons-parent" arch="noarch">
  <version epoch="0" ver="53" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 51-1" date="1595937600">- Update to upstream version 51</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 52-1" date="1598011200">- Update to upstream version 52</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 52-1" date="1598961600">- Update to version 52.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 52-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 52-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 52-4" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 52-5" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 52-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 53-1" date="1650801600">- Update to upstream version 53</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 53-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="14863a4ec39e3c93d74c200786235bf3fb2fa852ce5609668106ddc4f04f298c" name="apache-commons-parent" arch="noarch">
  <version epoch="0" ver="73" rel="3.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 65-2" date="1701691200">- Enable moditect-maven-plugin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 65-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 65-4" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 66-1" date="1706875200">- Update to upstream version 66</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 66-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 66-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 71-1" date="1718712000">- Update to upstream version 71</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 71-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 73-1" date="1724414400">- Update to upstream version 73
- Resolves: rhbz#2300082</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 73-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="29909b3d8fc18e9208846d0dae52339bd02d5453c68bbbc172389dd4457a1977" name="apache-parent" arch="noarch">
  <version epoch="0" ver="23" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 22-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 23-1" date="1580299200">- Update to upstream version 23</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 23-1" date="1583150400">- Update to version 23.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 23-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 23-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 23-6" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 23-7" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 23-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="26e969faed49b46f5f21e7460011dedfbd7af617bbf6746125dbf49757994cb7" name="apache-parent" arch="noarch">
  <version epoch="0" ver="26" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 23-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23-6" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 23-7" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 23-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 26-1" date="1650542400">- Update to upstream version 26</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 26-2" date="1651060800">- Workaround build issue with RPM 4.18</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26-3" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="c175d5648a35d8d4b8959be21a204be8c5b352566e047e39ef39c85f1907fa28" name="apache-parent" arch="noarch">
  <version epoch="0" ver="33" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 30-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 31-1" date="1702036800">- Update to upstream version 31</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 31-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 31-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31-6" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33-1" date="1724414400">- Update to upstream version 33
- Resolves: rhbz#2296782</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33-2" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33-3" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="47f1b858adff03185030963858d27285982350bad0ab770fb882d4f71498b99b" name="apache-resource-bundles" arch="noarch">
  <version epoch="1" ver="1.5" rel="18.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.5-1" date="1691755200">- Update to upstream version 1.5</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.5-2" date="1692792000">- Port to maven-verifier 2.0.0~M1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.5-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.5-4" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.5-5" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.5-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.5-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.5-8" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.5-9" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.5-18" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e151110fa19d978c5681ef91d0adacae0fbf7853b0403b8407a5a6ccbea51013" name="apache-resource-bundles" arch="noarch">
  <version epoch="0" ver="30" rel="5.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2-22" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2-24" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 30-1" date="1583323200">- Update to upstream version 30</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2-25" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2-26" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2-27" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 30-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 30-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 30-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 30-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="bd55261c32db72c6d3ff83eebf528d31ddda6677a6c4f26d3b209562b39abfa5" name="apache-resource-bundles" arch="noarch">
  <version epoch="0" ver="36" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2-26" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2-27" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 30-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 30-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 30-4" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 30-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 36-1" date="1651665600">- Update to upstream version 36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 36-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="2601776e25d20ff69b72edfaf1b88121134c4694dd5bf1bd028cdee9c3c87207" name="apiguardian" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-3" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.0-4" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.1-1" date="1610625600">- Update to upstream version 1.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.1.1-1" date="1612180800">- Update to version 1.1.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.1-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.1-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4a7c09edd77ea6c6eb68889dca7cedd2c422c9746e2e206f43b20c08c505fb7d" name="apiguardian" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="25.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.2-6" date="1676462400">- Build with module-info</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.2-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.2-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-13" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-23" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="56496f98741ef083db2109db82d162fd2567b55901f666a7a6fa96f0922e1834" name="apiguardian" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.1-1" date="1610625600">- Update to upstream version 1.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.1.1-1" date="1612180800">- Update to version 1.1.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-1" date="1635854400">- Update to upstream version 1.1.2
- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.2-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-4" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="70c2b6f12e850b79bf6854b2d4011c77f386707a096ee149ce9631aea52978c4" name="apiguardian-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-3" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.0-4" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.1-1" date="1610625600">- Update to upstream version 1.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.1.1-1" date="1612180800">- Update to version 1.1.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.1-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.1-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3118be8df1b02975a6a10e525e6a47e0e3accc1412601e54fbc3024cadaa9976" name="apiguardian-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="25.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.2-6" date="1676462400">- Build with module-info</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-7" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.2-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.2-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-13" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-23" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="0eacfb339872e01d87ae1fbdb59a1b0b28a1883e1809fe3ded815dadfb658960" name="apiguardian-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.1-1" date="1610625600">- Update to upstream version 1.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.1.1-1" date="1612180800">- Update to version 1.1.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-1" date="1635854400">- Update to upstream version 1.1.2
- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.2-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-4" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="199bf3b73481ca8f2268f2ef8b79f2f728ec6c2a6718dcbd2d7beed87b2284b0" name="aqute-bnd" arch="noarch">
  <version epoch="0" ver="6.2.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.2.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.0-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 5.2.0-4" date="1627905600">- Add parent to biz.aQute.bnd/pom.xml (fixes [WARNING] JAR will be
  empty - no content was marked for inclusion!)
- Remove scope from dependencies in pom.xml files (fixes missing
  dependencies, dependencies marked with scope provided are ignored by
  the rpm dependency generator)
- Drop some more commands: shell, exportreport, mbr (uses parts that
  are not packaged)
- Resolves: rhbz#1985566</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 5.2.0-5" date="1628596800">- reenable bnd-maven-plugin</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.2.0-6" date="1632484800">- Rename maven_plugin build conditional to bnd_maven_plugin</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 5.2.0-7" date="1637582400">- Enable biz.aQute.bnd.ant</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.0-8" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.2.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.2.0-1" date="1651579200">- Update to upstream version 6.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="06690942d98f850b3bace2077dd2b13897e350c6145463236ca43664207a38ef" name="aqute-bnd" arch="noarch">
  <version epoch="0" ver="6.3.1" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-3" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-4" date="1686139200">- Conditionally disable bnd-maven-plugin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-8" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.3.1-9" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.3.1-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-11" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-21" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="80f06c12d828801309a3502fa54ca8342f031b0f852c7e91634273acf546c1d3" name="aqute-bnd-javadoc" arch="noarch">
  <version epoch="0" ver="5.2.0" rel="7.el9"/>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 4.3.1-2" date="1606305600">- Add OSGi metadata</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 4.3.1-3" date="1607947200">- Update jansi path for jansi 1.x and jline path for jline 2.x</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.2.0-1" date="1611144000">- Update to upstream version 5.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.2.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.2.0-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.2.0-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 5.2.0-6" date="1639742400">- Add parent to biz.aQute.bnd/pom.xml (fixes [WARNING] JAR will be
  empty - no content was marked for inclusion!)
- Remove scope from dependencies in pom.xml files (fixes missing
  dependencies, dependencies marked with scope provided are ignored by
  the rpm dependency generator)
- Drop some more commands: shell, exportreport, mbr (uses parts that
  are not packaged)
- Resolves: rhbz#2033709</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.2.0-7" date="1640001600">- Add requires on java-devel</changelog>
</package>
<package pkgid="6eef824dc4b5b326592d0f8dd065e0afa52179d8ff64296380c8ca948a8d4c82" name="aqute-bnd-javadoc" arch="noarch">
  <version epoch="0" ver="6.2.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.2.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.0-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 5.2.0-4" date="1627905600">- Add parent to biz.aQute.bnd/pom.xml (fixes [WARNING] JAR will be
  empty - no content was marked for inclusion!)
- Remove scope from dependencies in pom.xml files (fixes missing
  dependencies, dependencies marked with scope provided are ignored by
  the rpm dependency generator)
- Drop some more commands: shell, exportreport, mbr (uses parts that
  are not packaged)
- Resolves: rhbz#1985566</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 5.2.0-5" date="1628596800">- reenable bnd-maven-plugin</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.2.0-6" date="1632484800">- Rename maven_plugin build conditional to bnd_maven_plugin</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 5.2.0-7" date="1637582400">- Enable biz.aQute.bnd.ant</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.0-8" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.2.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.2.0-1" date="1651579200">- Update to upstream version 6.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="3d567e84bcdccdd3b510e514714e82d87c1ac317182288ac72351309c4b7a3c3" name="aqute-bnd-javadoc" arch="noarch">
  <version epoch="0" ver="6.3.1" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-3" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-4" date="1686139200">- Conditionally disable bnd-maven-plugin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-8" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.3.1-9" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.3.1-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-11" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-21" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="16bdb5a0e525c299da3d760914b26f80441f2632e5c80f9b80cbdf30557f2a14" name="aqute-bndlib" arch="noarch">
  <version epoch="0" ver="6.2.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.2.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.0-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 5.2.0-4" date="1627905600">- Add parent to biz.aQute.bnd/pom.xml (fixes [WARNING] JAR will be
  empty - no content was marked for inclusion!)
- Remove scope from dependencies in pom.xml files (fixes missing
  dependencies, dependencies marked with scope provided are ignored by
  the rpm dependency generator)
- Drop some more commands: shell, exportreport, mbr (uses parts that
  are not packaged)
- Resolves: rhbz#1985566</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 5.2.0-5" date="1628596800">- reenable bnd-maven-plugin</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.2.0-6" date="1632484800">- Rename maven_plugin build conditional to bnd_maven_plugin</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 5.2.0-7" date="1637582400">- Enable biz.aQute.bnd.ant</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.0-8" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.2.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.2.0-1" date="1651579200">- Update to upstream version 6.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.2.0-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="12f3b5fe855d3620f288fe14d2068adc399f202c3d1728ea66d0b214a792f1fa" name="aqute-bndlib" arch="noarch">
  <version epoch="0" ver="6.3.1" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-3" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-4" date="1686139200">- Conditionally disable bnd-maven-plugin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-8" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.3.1-9" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.3.1-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.3.1-11" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.1-21" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="fe6bf967ceaf5602ad626ca6484010626a1104cf84a380b47b1ba77a6a417694" name="argparse-manpage" arch="noarch">
  <version epoch="0" ver="1.5" rel="4.el9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.2-1" date="1567857600">- new release</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.3-1" date="1578398400">- new release</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.4-1" date="1579867200">- new release to fix testsuite against Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.4-3" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.5-1" date="1607947200">- new release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c1495320108e9ad7fa343725e70dcfba52fea740030bdd7e490ec0b8ca7c161c" name="asciidoc-latex" arch="noarch">
  <version epoch="0" ver="9.1.0" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.6.10-0.16.20180605git986f99d" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabian Affolter &lt;mail@fabian-affolter.ch&gt; - 9.0.2-1" date="1602676800">- Remove patches
- Remove Vim support
- Update to latest upstream release 9.0.2</changelog>
  <changelog author="Fabian Affolter &lt;mail@fabian-affolter.ch&gt; - 9.0.4-1" date="1604145600">- Detection of latest Python releases (#1889725)
- Update to latest upstream release 9.0.4</changelog>
  <changelog author="Richard Shaw &lt;hobbes1069@gmail.com&gt; - 9.0.4-2" date="1607256000">- Add patch to fix problem with not respecting newline configuration.
- Remove unused patches.</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 9.0.4-3" date="1610625600">- remove ImageMagic requirement</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 9.0.4-4" date="1610971200">- remove asciidoc-music sub-package (lilypond requirement)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.0.4-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 9.1.0-1" date="1613476800">- update source url
- new upstream release 9.1.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9.1.0-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9.1.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e40ff8418eb3c725611c3ace4848ab9668a83392d1059201b46e880452a7e315" name="asio-devel" arch="aarch64">
  <version epoch="0" ver="1.16.1" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.8-11" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Alessandro Locati &lt;me@fale.io&gt; - 1.16.1-1" date="1593864000">* Bump to 1.16.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.1-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.16.1-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.16.1-5" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.16.1-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b3af611ccc797a665223f08bd0a81866d159b8b6412d5ed99e6d0849a1f5ff70" name="aspnetcore-runtime-3.1" arch="aarch64">
  <version epoch="0" ver="3.1.18" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.113-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.113-3" date="1619006400">- Fix build by adding CentOS 9 RIDs
- Resolves: RHBZ#1951312</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-1" date="1621339200">- Update to .NET SDK 3.1.115 and Runtime 3.1.15
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-2" date="1623067200">- Support building against OpenSSL 3.0
- Resolves: RHBZ#1965045</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.116-1" date="1623412800">- Update to .NET SDK 3.1.116 and Runtime 3.1.16
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-1" date="1628769600">- Update to .NET SDK 3.1.117 and Runtime 3.1.17
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-2" date="1629806400">- Fix building and running against OpenSSL 3.0
- Resolves: RHBZ#1991050</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.118-1" date="1630065600">- Update to .NET SDK 3.1.118 and Runtime 3.1.18
- Resolves: RHBZ#1961848</changelog>
</package>
<package pkgid="353b7ebb872ae8692e486708913401c91d8c43a1d05167d7af671de5e54703a1" name="aspnetcore-targeting-pack-3.1" arch="aarch64">
  <version epoch="0" ver="3.1.18" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.113-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.113-3" date="1619006400">- Fix build by adding CentOS 9 RIDs
- Resolves: RHBZ#1951312</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-1" date="1621339200">- Update to .NET SDK 3.1.115 and Runtime 3.1.15
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-2" date="1623067200">- Support building against OpenSSL 3.0
- Resolves: RHBZ#1965045</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.116-1" date="1623412800">- Update to .NET SDK 3.1.116 and Runtime 3.1.16
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-1" date="1628769600">- Update to .NET SDK 3.1.117 and Runtime 3.1.17
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-2" date="1629806400">- Fix building and running against OpenSSL 3.0
- Resolves: RHBZ#1991050</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.118-1" date="1630065600">- Update to .NET SDK 3.1.118 and Runtime 3.1.18
- Resolves: RHBZ#1961848</changelog>
</package>
<package pkgid="af4f35c0884ccb2129fbbce4530258fbf17c7456df3aa59070734b2bc4006841" name="assertj-core" arch="noarch">
  <version epoch="0" ver="3.19.0" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.17.2-1" date="1600689600">- Update to upstream version 3.17.2</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.17.2-1" date="1602849600">- Update to version 3.17.2.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.18.1-1" date="1611144000">- Update to upstream version 3.18.1</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.19.0-1" date="1611662400">- Update to upstream version 3.19.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.17.2-2" date="1611662401">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.19.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.0-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.0-4" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.19.0-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.0-6" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="7f3ada667b1f475f21d1f26a7d78d952f2f71c8c7da5af448562f3c0f7f98758" name="assertj-core" arch="noarch">
  <version epoch="0" ver="3.26.3" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.24.2-2" date="1677499200">- Remove dependency on junit5-bom</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.24.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.24.2-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-8" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.24.2-9" date="1721822400">- Don't install CONTRIBUTING.md in javadoc package</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.26.3-1" date="1727092800">- Update to upstream version 3.26.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.26.3-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="385313303f3d7afd199b37c28d7bdc55ba4a6b9043ba291b7b9c10d455114f6c" name="assertj-core-javadoc" arch="noarch">
  <version epoch="0" ver="3.19.0" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.17.2-1" date="1600689600">- Update to upstream version 3.17.2</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.17.2-1" date="1602849600">- Update to version 3.17.2.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.18.1-1" date="1611144000">- Update to upstream version 3.18.1</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.19.0-1" date="1611662400">- Update to upstream version 3.19.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.17.2-2" date="1611662401">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.19.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.0-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.0-4" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.19.0-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.19.0-6" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a2ca031f411b0e63590637041eabc69701b4f2a22f98545ea1ab1dd6ef4cffb3" name="assertj-core-javadoc" arch="noarch">
  <version epoch="0" ver="3.19.0" rel="9.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.19.0-6" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.19.0-7" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.19.0-8" date="1732363200">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.19.0-9" date="1732449600">- Do not install CONTRIBUTING.md in javadoc package</changelog>
</package>
<package pkgid="ea5e92e6e3eefe6394070229505f65c16e4f82046da487a94350c0e145fa06cb" name="assertj-core-javadoc" arch="noarch">
  <version epoch="0" ver="3.19.0" rel="9.el9_8.1"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.19.0-6" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.19.0-7" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.19.0-8" date="1732363200">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.19.0-9" date="1732449600">- Do not install CONTRIBUTING.md in javadoc package</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.19.0-9.1" date="1782388800">- Fix CVE-2026-24400: prevent XXE attacks in XmlStringPrettyFormatter
- Resolves: RHEL-183484</changelog>
</package>
<package pkgid="7b3579b2c3cc67ceaa3bd279895c77652974ab1d27a3990aefa3273fa89225e7" name="assertj-core-javadoc" arch="noarch">
  <version epoch="0" ver="3.26.3" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.24.2-2" date="1677499200">- Remove dependency on junit5-bom</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.24.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-6" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.24.2-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.24.2-8" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.24.2-9" date="1721822400">- Don't install CONTRIBUTING.md in javadoc package</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.26.3-1" date="1727092800">- Update to upstream version 3.26.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.26.3-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="15245eea83bc7398b55df27c415c6902e0b9330273477a5e46fa5138392f8dfb" name="atinject" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="14.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-12" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-14" date="1734523200">- Sync with Fedora</changelog>
</package>
<package pkgid="00820ed6359a989ca475e904c9ced72094d3d2ae0c6466a12a2cc9004081fea4" name="atinject" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1-35.20100611svn86" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.3-1" date="1601899200">- Update to upstream version 1.0.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1-36.20100611svn86" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-1" date="1635854400">- Update to upstream version 1.0.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.0.5-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a49156153fdcd91527e0b6ac03cf01018002d9fa98f352944fe30be97a36a80b" name="atinject-javadoc" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="9.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.3-6" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.0.3-7" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.0.3-8" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.0.3-9" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="4ee1fe8f17234161d9b9b5d62114c75b9357000d2a633d63caaa86f10ffe681b" name="atinject-javadoc" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="14.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-12" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-14" date="1734523200">- Sync with Fedora</changelog>
</package>
<package pkgid="b95efbafa390d3f1506a7e5390b7d0f493e37a2222fdabdf05249f4b81f69891" name="atinject-javadoc" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="14.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-5" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-9" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-10" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-11" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-12" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.0.5-13" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-14" date="1734523200">- Sync with Fedora</changelog>
</package>
<package pkgid="5ae4ee95a62b7501bda7fb7ae11dd363583c6448b20187054b73e61ca6726281" name="atinject-javadoc" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1-35.20100611svn86" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.3-1" date="1601899200">- Update to upstream version 1.0.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1-36.20100611svn86" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-1" date="1635854400">- Update to upstream version 1.0.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.0.5-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="aa035e060d4894673c61eb452a83fa02eff067932dd13bd0ae3123fb281005b8" name="atinject-javadoc" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.0.5-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.5-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="706aa30b98a475e780b7beecd530ab83164b38926079c6002ab235b9d8bc4fe7" name="atlas-static" arch="aarch64">
  <version epoch="0" ver="3.10.3" rel="17.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-10" date="1580126400">- Fix compatibility with gcc 10
- Sync compiler/linker flags with RHEL</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-11" date="1581595200">- Drop IBM z10 and z196 subpackages
- s390 is now optimized for z12
Related: #1780286</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.3-12" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3.13" date="1598529600">- Sync with rhel 8.3 + cleanup
- Add new subpackages - z{14,15}
- Unlike in rhel8, the base subpackage still needs to be build for z12.
- Covscan related bugfixes
- Spec and git cleanup (remove unused patches/sources)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.3-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-14" date="1613995200">- Fix the messed scriptlets
Resolves: #1929845</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.10.3-15" date="1613995201">- Remove unused scriptlets</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.3-16" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.3-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1c6004f485989eef26bca4a6084d61163400185aaf740bebfad4d921b0d649ed" name="augeas-bash-completion" arch="noarch">
  <version epoch="0" ver="1.14.1" rel="3.el9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-1" date="1693656000">- Rebase to Fedora Rawhide
- Remove patches which are upstream
- resolves: RHEL-56802</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-2" date="1748347200">- Fix parsing of multipath.conf
  resolves: RHEL-93649</changelog>
</package>
<package pkgid="3a75887d8747903552bcebd12aacaaadb1aa52ee7718b0f66185e3859342c0c8" name="augeas-static" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="3.el9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-1" date="1693656000">- Rebase to Fedora Rawhide
- Remove patches which are upstream
- resolves: RHEL-56802</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.14.1-2" date="1748347200">- Fix parsing of multipath.conf
  resolves: RHEL-93649</changelog>
</package>
<package pkgid="b02a2b79547176bd78bc40a4f3391a333f38dc2c88c2a755547389b64f42f211" name="authselect-devel" arch="aarch64">
  <version epoch="0" ver="1.2.6" rel="3.el9"/>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-2" date="1691064000">- Fix Japanese translations (RHBZ #2153364)
- Update translations (RHBZ #2189498)
- Do not prompt for password twice when changing password of local user (RHBZ #2228098)</changelog>
  <changelog author="Pavel B&#x159;ezina &lt;pbrezina@redhat.com&gt; - 1.2.6-3" date="1738756800">- Support group merging in nsswitch.conf (RHEL-15779)</changelog>
</package>
<package pkgid="b88f72a795466bdffb3ee2091b78e8ade472870552ee96cb032e82f61f5fcd2e" name="autotrace-devel" arch="aarch64">
  <version epoch="0" ver="0.31.1" rel="65.el9"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.31.1-58" date="1603886400">- Don't build with ImageMagick on EL</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.31.1-59" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.31.1-60" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.31.1-61" date="1619784000">- Resolves: CVE-2019-19004 : integer overflow in input-bmp.c
- Resolves: CVE-2019-19005 : fix bitmap double free in main.c</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.31.1-62" date="1621598400">- Resolves: rhbz#1961993 - Add gating tests from rhel-8</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.31.1-63" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.31.1-64" date="1662984000">- Resolves: rhbz#2121828
  CVE-2022-32323 - heap-buffer overflow via the ReadImage() at input-bmp.c</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.31.1-65" date="1663070400">- Resolves: rhbz#2121828 Fix the gating tests by using only local test
  Upstream testsuite will not work as this package code is very old</changelog>
</package>
<package pkgid="dcbd8987df637a8e1bddc75878f50062904fe9135a5d6a7788dcdc4fe3520739" name="avahi-dnsconfd" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-21" date="1724673600">- fix file attributes on /run/avahi-daemon (RHEL-5633)
- avahi-client: fix resource leak (RHEL-27722)
- fix resource leak in avahi_time_event_queue_new (RHEL-27717)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-22" date="1736164800">- Fix CVE-2024-52616 (RHEL-67722)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-23" date="1752062400">- Fix CVE-2024-52615 (RHEL-94846)</changelog>
</package>
<package pkgid="5636c5f568c977e506ba28f7b39284b5818502fcca42a2fafff82dd7df02ff81" name="avahi-ui" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-21" date="1724673600">- fix file attributes on /run/avahi-daemon (RHEL-5633)
- avahi-client: fix resource leak (RHEL-27722)
- fix resource leak in avahi_time_event_queue_new (RHEL-27717)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-22" date="1736164800">- Fix CVE-2024-52616 (RHEL-67722)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-23" date="1752062400">- Fix CVE-2024-52615 (RHEL-94846)</changelog>
</package>
<package pkgid="9680067fa800f5212c89547564504ec765a804aee840bdf1337536d401d3641c" name="avahi-ui-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-21" date="1724673600">- fix file attributes on /run/avahi-daemon (RHEL-5633)
- avahi-client: fix resource leak (RHEL-27722)
- fix resource leak in avahi_time_event_queue_new (RHEL-27717)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-22" date="1736164800">- Fix CVE-2024-52616 (RHEL-67722)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-23" date="1752062400">- Fix CVE-2024-52615 (RHEL-94846)</changelog>
</package>
<package pkgid="263a80dac787a92ac460df105d56fb0c3950198041621545919ed32e66b5cd94" name="avahi-ui-gtk3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-21" date="1724673600">- fix file attributes on /run/avahi-daemon (RHEL-5633)
- avahi-client: fix resource leak (RHEL-27722)
- fix resource leak in avahi_time_event_queue_new (RHEL-27717)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-22" date="1736164800">- Fix CVE-2024-52616 (RHEL-67722)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-23" date="1752062400">- Fix CVE-2024-52615 (RHEL-94846)</changelog>
</package>
<package pkgid="91369b0f544a9c342f48edbe3198ac2dee959d340e3474964f56c56d7c923837" name="avahi-ui-tools" arch="aarch64">
  <version epoch="0" ver="0.8" rel="23.el9"/>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-21" date="1724673600">- fix file attributes on /run/avahi-daemon (RHEL-5633)
- avahi-client: fix resource leak (RHEL-27722)
- fix resource leak in avahi_time_event_queue_new (RHEL-27717)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-22" date="1736164800">- Fix CVE-2024-52616 (RHEL-67722)</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 0.8-23" date="1752062400">- Fix CVE-2024-52615 (RHEL-94846)</changelog>
</package>
<package pkgid="ab1f9fa3b67a7db77a8b423bae0272901bfabfa53e25f85c492cd9545d4731b1" name="bacula-console-bat" arch="aarch64">
  <version epoch="0" ver="11.0.1" rel="6.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 11.0.1-6" date="1748606400">- fix bacula compatibility with Image Mode (RHEL-6862)</changelog>
</package>
<package pkgid="008aa03f6780398eacda112d5e623c982ccb0117fe431dc8adb1a80ac4c42a68" name="bacula-devel" arch="aarch64">
  <version epoch="0" ver="11.0.1" rel="6.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 11.0.1-6" date="1748606400">- fix bacula compatibility with Image Mode (RHEL-6862)</changelog>
</package>
<package pkgid="71d7a9a6e6a451c0e895ff053f7c56b3063e148140eeabd83befe29b05641a2b" name="bacula-traymonitor" arch="aarch64">
  <version epoch="0" ver="11.0.1" rel="6.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 11.0.1-6" date="1748606400">- fix bacula compatibility with Image Mode (RHEL-6862)</changelog>
</package>
<package pkgid="476945f132492132d2926b0cb0f21c6aeddcc163e00f2c3832bf2d542e2e3758" name="bash-doc" arch="aarch64">
  <version epoch="0" ver="5.1.8" rel="9.el9"/>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-5" date="1659960000">- Fix an off by one error while calling mbrtowc()
  Resolves: #2115206</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-6" date="1669118400">- Add a null check in parameter_brace_transform() function
  Resolves: CVE-2022-3715</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-7" date="1706097600">- Restore audit logs in bash-4.3 or newer versions
  Resolves: RHEL-22619</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-8" date="1707739200">- Fix an issue with adding newline in bracketed paste mode
  Resolves: #2168963</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 5.1.8-9" date="1707825600">- Fix a performance regression while using large number of environment variables
  Resolves: RHEL-20020</changelog>
</package>
<package pkgid="1049d4c73374418db55545469923354942f5b659ec8e8c630e49586e1945452f" name="bcel-javadoc" arch="noarch">
  <version epoch="0" ver="6.4.1" rel="13.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.1-9" date="1669896000">- Fix arbitrary bytecode produced via out-of-bounds writing
- Resolves: CVE-2022-42920</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 6.4.1-10" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 6.4.1-11" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 6.4.1-12" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 6.4.1-13" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="af342a84bc6fb5eb3602a901124040d481b70d2abf09bd079af6f7428922586b" name="bdf2psf" arch="noarch">
  <version epoch="0" ver="1.200" rel="4.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.195-1" date="1585569600">- Update to latest upstream version
  Resolves: #1817552</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.196-1" date="1594641600">- Update to latest upstream version
  Resolves: #1856118</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.196-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.197-1" date="1600776000">- Update to latest upstream version
  Resolves: #1881276</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.198-1" date="1604923200">- Update to latest upstream version
  Resolves: #1893002</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.199-1" date="1607342400">- Update to latest upstream version
  Resolves: #1902975</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.200-1" date="1610366400">- Update to latest upstream version
  Resolves: #1911871</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.200-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.200-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.200-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4789b19461fe7e5798508e226ef96b9055e929f4ca06782b8a31b95b204787f8" name="beakerlib" arch="noarch">
  <version epoch="0" ver="1.29.3" rel="1.el9"/>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.24-1" date="1612008000">- rlImport --all imports only required libraries, not recommend
- implemented chkconfig fallback to systemctl
- fixed `make test` test suite execution</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.25-1" date="1612872000">- rebased yash to version 1.2, fixes the backtick iterpretation
- docs fixes, by Štěpán Němec &lt;snemec@redhat.com&gt;</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.26-1" date="1615291200">- fixed rlServiceDisable if called without rlServiceEnable beforehand
- few internal fixes</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.27-1" date="1616673600">- rlCheckRequirements is now able to check also versions requirements</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.27-2" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.28-1" date="1636459200">- cleanup rlRun_LOG files at rlJournalEnd
- close journal in rlDie - generate journal.xml at that moment
- implemented functions rlIsOS, rlIsOSLike, rlIsOSVersion, and rlIsRHELLike
- rlAssertRequired can now handle versioned dependencies
- new functions rlCheckRerquired, rlCheckRecommended, and rlCheckDependencies</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.29.1-1" date="1658232000">- rlImport: upwards traversal start in the current directory
- rlImport: support '.' to import lib.sh from the current directory
- rlImport: can handle libraries required by the fmf_id in different forms than (url, name)
  also name-only. Also the path attribute is considered
- fingerprint: an asserts fingerprint and phases fingerprint is computed
  it is printed as a message and it is also available in the TestResults file
- fixed a check for os-release file existence
- fixed LOG_LEVEL usage
- removed dependency on selinuxenabled
- fixed a few typos, thanks to jwakely@fedoraproject.org</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.29.2-1" date="1661428800">- improved performance and memory consumption of the fingerprint feature</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.29.3-1" date="1666267200">- support for fmf_id nick attribute</changelog>
</package>
<package pkgid="8e8c77c0efa20f6078bbfce7520cc8573828b13281ec2b9b2aa421feee16fbf2" name="beakerlib-vim-syntax" arch="noarch">
  <version epoch="0" ver="1.29.3" rel="1.el9"/>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.24-1" date="1612008000">- rlImport --all imports only required libraries, not recommend
- implemented chkconfig fallback to systemctl
- fixed `make test` test suite execution</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.25-1" date="1612872000">- rebased yash to version 1.2, fixes the backtick iterpretation
- docs fixes, by Štěpán Němec &lt;snemec@redhat.com&gt;</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.26-1" date="1615291200">- fixed rlServiceDisable if called without rlServiceEnable beforehand
- few internal fixes</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.27-1" date="1616673600">- rlCheckRequirements is now able to check also versions requirements</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.27-2" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.28-1" date="1636459200">- cleanup rlRun_LOG files at rlJournalEnd
- close journal in rlDie - generate journal.xml at that moment
- implemented functions rlIsOS, rlIsOSLike, rlIsOSVersion, and rlIsRHELLike
- rlAssertRequired can now handle versioned dependencies
- new functions rlCheckRerquired, rlCheckRecommended, and rlCheckDependencies</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.28-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.29.1-1" date="1658232000">- rlImport: upwards traversal start in the current directory
- rlImport: support '.' to import lib.sh from the current directory
- rlImport: can handle libraries required by the fmf_id in different forms than (url, name)
  also name-only. Also the path attribute is considered
- fingerprint: an asserts fingerprint and phases fingerprint is computed
  it is printed as a message and it is also available in the TestResults file
- fixed a check for os-release file existence
- fixed LOG_LEVEL usage
- removed dependency on selinuxenabled
- fixed a few typos, thanks to jwakely@fedoraproject.org</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.29.2-1" date="1661428800">- improved performance and memory consumption of the fingerprint feature</changelog>
  <changelog author="Dalibor Pospisil &lt;dapospis@redhat.com&gt; - 1.29.3-1" date="1666267200">- support for fmf_id nick attribute</changelog>
</package>
<package pkgid="e1c6ea3ffebace55a9501b28382347df0f52b6718698338e5cce50387867ffb8" name="beust-jcommander" arch="noarch">
  <version epoch="0" ver="1.78" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.78-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-7" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-8" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.78-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a31ddaf5e8592514afab7c916ef71042de508b968fb5d577183985b809fb0d81" name="beust-jcommander" arch="noarch">
  <version epoch="0" ver="1.82" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-5" date="1698753600">- Fix license directory permissions
- Resolves: rhbz#2144648</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-7" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.82-8" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.82-9" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-10" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-11" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-18" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b7ed66d463ec682cbf89f84548c5257304b487a40bce183a7ba32d5bcce07ba8" name="beust-jcommander-javadoc" arch="noarch">
  <version epoch="0" ver="1.78" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.78-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-7" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-8" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.78-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="b85261f4e4deee1e232f4d2e8abeaf421a2ebe923cf0f2f994b1821af3204f72" name="beust-jcommander-javadoc" arch="noarch">
  <version epoch="0" ver="1.78" rel="9.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.78-1" date="1573300800">- Update to version 1.78.
- Remove unnecessary parent from POM file.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-3" date="1591704000">- skipped tests as they require user input with jdk11, changed way of javadoc generation</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.78-3" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.78-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.78-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.78-7" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.78-8" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.78-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e137dbeea11d9d9dcf3c918034f88274c341fb3c57bf9cebed72654a2bc0cf2b" name="beust-jcommander-javadoc" arch="noarch">
  <version epoch="0" ver="1.82" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-5" date="1698753600">- Fix license directory permissions
- Resolves: rhbz#2144648</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-7" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.82-8" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.82-9" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-10" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.82-11" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.82-18" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="951e7c830c54131e94a369942d2e3c5cfcd851e03d2ac9b6d8639596a0297aba" name="bitmap-console-fonts" arch="noarch">
  <version epoch="0" ver="0.3" rel="40.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-32" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-33" date="1580990400">- Provide OpenType Bitmap fonts
- Use bitmapfonts2otb.py to combine bitmap fonts
- Add bitmap-*-opentype-fonts sub packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-34" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-35" date="1599220800">- Use BDF fonts for OpenType conversion</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-36" date="1609243200">- Rebuilt with fonttosfnt 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-37" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.3-38" date="1614686400">- Resolves: rhbz#1933563 - Don't BuildRequires xorg-x11-font-utils</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-39" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-40" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3b45e35f8742cc0a9dc2b747f79dfde489a9bfab8d01d7bae93862b6da0d39e6" name="bitmap-console-opentype-fonts" arch="noarch">
  <version epoch="0" ver="0.3" rel="40.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-32" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-33" date="1580990400">- Provide OpenType Bitmap fonts
- Use bitmapfonts2otb.py to combine bitmap fonts
- Add bitmap-*-opentype-fonts sub packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-34" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-35" date="1599220800">- Use BDF fonts for OpenType conversion</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-36" date="1609243200">- Rebuilt with fonttosfnt 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-37" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.3-38" date="1614686400">- Resolves: rhbz#1933563 - Don't BuildRequires xorg-x11-font-utils</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-39" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-40" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e89c46608dc60fc2261b4ec46e3ee5dd0f9ffdc994a084d4ba127f63bd7046c6" name="bitmap-fangsongti-opentype-fonts" arch="noarch">
  <version epoch="0" ver="0.3" rel="40.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-32" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-33" date="1580990400">- Provide OpenType Bitmap fonts
- Use bitmapfonts2otb.py to combine bitmap fonts
- Add bitmap-*-opentype-fonts sub packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-34" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-35" date="1599220800">- Use BDF fonts for OpenType conversion</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-36" date="1609243200">- Rebuilt with fonttosfnt 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-37" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.3-38" date="1614686400">- Resolves: rhbz#1933563 - Don't BuildRequires xorg-x11-font-utils</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-39" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-40" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9a0aba02f6786a88545254a6884cfbffcd16f926e3362baf82811c331bb36aa2" name="bitmap-fixed-fonts" arch="noarch">
  <version epoch="0" ver="0.3" rel="40.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-32" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-33" date="1580990400">- Provide OpenType Bitmap fonts
- Use bitmapfonts2otb.py to combine bitmap fonts
- Add bitmap-*-opentype-fonts sub packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-34" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-35" date="1599220800">- Use BDF fonts for OpenType conversion</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-36" date="1609243200">- Rebuilt with fonttosfnt 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-37" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.3-38" date="1614686400">- Resolves: rhbz#1933563 - Don't BuildRequires xorg-x11-font-utils</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-39" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-40" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2a46df56fd8301ef2e0717b8f0f60b712988d1cccd39b4817116b98f895a4d7b" name="bitmap-fixed-opentype-fonts" arch="noarch">
  <version epoch="0" ver="0.3" rel="40.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-32" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-33" date="1580990400">- Provide OpenType Bitmap fonts
- Use bitmapfonts2otb.py to combine bitmap fonts
- Add bitmap-*-opentype-fonts sub packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-34" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-35" date="1599220800">- Use BDF fonts for OpenType conversion</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-36" date="1609243200">- Rebuilt with fonttosfnt 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-37" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.3-38" date="1614686400">- Resolves: rhbz#1933563 - Don't BuildRequires xorg-x11-font-utils</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-39" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-40" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="48ea3717542cb41360b64c278bafb4080cbbd6158e2bc5760cab121831164f22" name="bitmap-fonts-compat" arch="noarch">
  <version epoch="0" ver="0.3" rel="40.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-32" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-33" date="1580990400">- Provide OpenType Bitmap fonts
- Use bitmapfonts2otb.py to combine bitmap fonts
- Add bitmap-*-opentype-fonts sub packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-34" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-35" date="1599220800">- Use BDF fonts for OpenType conversion</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-36" date="1609243200">- Rebuilt with fonttosfnt 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-37" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.3-38" date="1614686400">- Resolves: rhbz#1933563 - Don't BuildRequires xorg-x11-font-utils</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-39" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-40" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a15f3f42c3445896db7cce79358f13858eb7720d54fb83ade886ed19ab399d20" name="bitmap-lucida-typewriter-fonts" arch="noarch">
  <version epoch="0" ver="0.3" rel="40.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-32" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-33" date="1580990400">- Provide OpenType Bitmap fonts
- Use bitmapfonts2otb.py to combine bitmap fonts
- Add bitmap-*-opentype-fonts sub packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-34" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-35" date="1599220800">- Use BDF fonts for OpenType conversion</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-36" date="1609243200">- Rebuilt with fonttosfnt 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-37" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.3-38" date="1614686400">- Resolves: rhbz#1933563 - Don't BuildRequires xorg-x11-font-utils</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-39" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-40" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cdd3bac5554c64306279d2eb16e576c7e459779750171f917a6040e21069640e" name="bitmap-lucida-typewriter-opentype-fonts" arch="noarch">
  <version epoch="0" ver="0.3" rel="40.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-32" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-33" date="1580990400">- Provide OpenType Bitmap fonts
- Use bitmapfonts2otb.py to combine bitmap fonts
- Add bitmap-*-opentype-fonts sub packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-34" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-35" date="1599220800">- Use BDF fonts for OpenType conversion</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-36" date="1609243200">- Rebuilt with fonttosfnt 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-37" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.3-38" date="1614686400">- Resolves: rhbz#1933563 - Don't BuildRequires xorg-x11-font-utils</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-39" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-40" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d020c89e481b0125e86cc9047d0c9ef477c118bfc1dce48d506373dc639ed92d" name="bitmap-opentype-fonts-compat" arch="noarch">
  <version epoch="0" ver="0.3" rel="40.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-32" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-33" date="1580990400">- Provide OpenType Bitmap fonts
- Use bitmapfonts2otb.py to combine bitmap fonts
- Add bitmap-*-opentype-fonts sub packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-34" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-35" date="1599220800">- Use BDF fonts for OpenType conversion</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-36" date="1609243200">- Rebuilt with fonttosfnt 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-37" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.3-38" date="1614686400">- Resolves: rhbz#1933563 - Don't BuildRequires xorg-x11-font-utils</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-39" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-40" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a1810ab9cd96cddb3cd35daddd510ba1c8c24bfd75393508f66bd00c65d746b6" name="blas-static" arch="aarch64">
  <version epoch="0" ver="3.9.0" rel="13.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.9.0-9" date="1689681600">- Rename manpages: some names conflict with the man-pages package
  Resolves: rhbz#2222868</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.9.0-10" date="1691755200">- Add explicit requires to the devel subpackages
  Related: rhbz#2229142</changelog>
  <changelog author="Takuya Wakazono &lt;takuya.wakazono@miraclelinux.com&gt; - 3.9.0-11" date="1729684800">- Fix soname of the 64-bit version libraries
  Resolves: RHEL-24851</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.9.0-12" date="1752667200">- Spec file cleanup
- Remove unused patches
  Related: RHEL-5770</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 3.9.0-13" date="1752753600">- Add explicit requires to the devel subpackages
- Note: the the cblas64 seems to be linked against the libblas (not the 64 version)
- this is not a regression, however in the Fedora it uses libblas64 instead.
- Resolves: RHEL-5768</changelog>
</package>
<package pkgid="85393cbf72fbac169644d1842d8604a8b21741ff83ce9ddffb31f7891cd50023" name="blis" arch="aarch64">
  <version epoch="0" ver="0.9.0" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="&lt;vagrant@rhel8.localdomain&gt; - 0.7.0-11" date="1677585600">- Use SPDX licence tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.7.0-13" date="1695211200">- Don't BR /usr/bin/python (#2237696)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.9.0-1" date="1695211201">- Update to 0.9.0
- Drop patch
- Turn off LTO and keeping frame pointers</changelog>
</package>
<package pkgid="c5aac58d5687b325f9c4b2a87494420b177ec6d1cf920da7f7f596d57fd08d25" name="blis-devel" arch="aarch64">
  <version epoch="0" ver="0.9.0" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="&lt;vagrant@rhel8.localdomain&gt; - 0.7.0-11" date="1677585600">- Use SPDX licence tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.7.0-13" date="1695211200">- Don't BR /usr/bin/python (#2237696)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.9.0-1" date="1695211201">- Update to 0.9.0
- Drop patch
- Turn off LTO and keeping frame pointers</changelog>
</package>
<package pkgid="8c28503d62873121ee1646a809a81ade687f0824a79a1a280d32fdbbc1a6579a" name="blis-openmp" arch="aarch64">
  <version epoch="0" ver="0.9.0" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="&lt;vagrant@rhel8.localdomain&gt; - 0.7.0-11" date="1677585600">- Use SPDX licence tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.7.0-13" date="1695211200">- Don't BR /usr/bin/python (#2237696)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.9.0-1" date="1695211201">- Update to 0.9.0
- Drop patch
- Turn off LTO and keeping frame pointers</changelog>
</package>
<package pkgid="5ee9448ba5695f667f22e809ef96d5946ca146a95170acb2babccfb4c3565e71" name="blis-openmp64" arch="aarch64">
  <version epoch="0" ver="0.9.0" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="&lt;vagrant@rhel8.localdomain&gt; - 0.7.0-11" date="1677585600">- Use SPDX licence tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.7.0-13" date="1695211200">- Don't BR /usr/bin/python (#2237696)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.9.0-1" date="1695211201">- Update to 0.9.0
- Drop patch
- Turn off LTO and keeping frame pointers</changelog>
</package>
<package pkgid="09a06a2f52e90fcb5bdb669de4308ea76350a0bc3d6ee127743616041af49f1e" name="blis-serial64" arch="aarch64">
  <version epoch="0" ver="0.9.0" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="&lt;vagrant@rhel8.localdomain&gt; - 0.7.0-11" date="1677585600">- Use SPDX licence tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.7.0-13" date="1695211200">- Don't BR /usr/bin/python (#2237696)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.9.0-1" date="1695211201">- Update to 0.9.0
- Drop patch
- Turn off LTO and keeping frame pointers</changelog>
</package>
<package pkgid="c20a1feb5ab07165b78e142ebfc99ba42c8575f869cd6408dee3c9bbdb20f903" name="blis-srpm-macros" arch="noarch">
  <version epoch="0" ver="0.9.0" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="&lt;vagrant@rhel8.localdomain&gt; - 0.7.0-11" date="1677585600">- Use SPDX licence tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.7.0-13" date="1695211200">- Don't BR /usr/bin/python (#2237696)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.9.0-1" date="1695211201">- Update to 0.9.0
- Drop patch
- Turn off LTO and keeping frame pointers</changelog>
</package>
<package pkgid="e236c9fc3a2f08a27679afa1cc4de04af00b00ac558aeff19e7bfb793c0cd535" name="blis-threads" arch="aarch64">
  <version epoch="0" ver="0.9.0" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="&lt;vagrant@rhel8.localdomain&gt; - 0.7.0-11" date="1677585600">- Use SPDX licence tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.7.0-13" date="1695211200">- Don't BR /usr/bin/python (#2237696)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.9.0-1" date="1695211201">- Update to 0.9.0
- Drop patch
- Turn off LTO and keeping frame pointers</changelog>
</package>
<package pkgid="79eb18c80dc93c433e5f57930f0d8940f0dde1d8bf0b4dec35b1d9be467e50bd" name="blis-threads64" arch="aarch64">
  <version epoch="0" ver="0.9.0" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-9" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-10" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-11" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="&lt;vagrant@rhel8.localdomain&gt; - 0.7.0-11" date="1677585600">- Use SPDX licence tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-12" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.7.0-13" date="1695211200">- Don't BR /usr/bin/python (#2237696)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 0.9.0-1" date="1695211201">- Update to 0.9.0
- Drop patch
- Turn off LTO and keeping frame pointers</changelog>
</package>
<package pkgid="92063ed1ef7d6a24195918c9addde583c47aa18df566b1950599025d289d83f0" name="bluez-hid2hci" arch="aarch64">
  <version epoch="0" ver="5.85" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-1" date="1707998400">- Update to 5.72</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt; - 5.72-2" date="1721044800">- Bump release to rebuild for RHEL-9.5</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
</package>
<package pkgid="e8ecdcc773f74da67129dc03c1cb2f7082b025012519a7f6b847d01b82c6c2f3" name="bluez-hid2hci" arch="aarch64">
  <version epoch="0" ver="5.87+1.git30db66dc971b" rel="1.el9_8"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-1" date="1770724800">- Update to 5.86
- Re-add btmgmt as it does not require bluetoothd to be running,
  unlike bluetoothctl mgmt
- Fix audio output not working in some circumstances
  Resolves: RHEL-147734</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-2" date="1774612800">- Fix startup warning
  Resolves: RHEL-161518</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86+1.git220f102c8db9-1" date="1782993600">- Update to 5.87 pre-release snapshot
  Resolves: RHEL-169988</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.87+1.git30db66dc971b-1" date="1784203200">- Update to 5.87 post-release snapshot
  Resolves: RHEL-193095</changelog>
</package>
<package pkgid="a58f6cefd8234ccc14dd21bc2b8e6e3c08995c5f4c98b86cde19e287e63b31b8" name="bluez-mesh" arch="aarch64">
  <version epoch="0" ver="5.85" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-1" date="1707998400">- Update to 5.72</changelog>
  <changelog author="David Marlin &lt;dmarlin@redhat.com&gt; - 5.72-2" date="1721044800">- Bump release to rebuild for RHEL-9.5</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
</package>
<package pkgid="7f7cb3f10395b55cbdd63ba36116203d47eb9cb3dfa48010e078c58fc9bed34c" name="bluez-mesh" arch="aarch64">
  <version epoch="0" ver="5.87+1.git30db66dc971b" rel="1.el9_8"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-3" date="1737547200">- Fix ConfigurationDirectory startup warning
  Related: RHEL-71798</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.72-4" date="1737720000">- Fix plugin_init() startup warnings
  Related: RHEL-68934</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1749816000">- Update to 5.83
  Resolves: RHEL-94819
  Resolves: RHEL-56073
  Resolves: RHEL-1924</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.83-1" date="1755518400">- Fix problem with menu handling
  Resolves: RHEL-103966</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.85-1" date="1769428800">- Update to 5.85
  Resolves: RHEL-142552</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-1" date="1770724800">- Update to 5.86
- Re-add btmgmt as it does not require bluetoothd to be running,
  unlike bluetoothctl mgmt
- Fix audio output not working in some circumstances
  Resolves: RHEL-147734</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86-2" date="1774612800">- Fix startup warning
  Resolves: RHEL-161518</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.86+1.git220f102c8db9-1" date="1782993600">- Update to 5.87 pre-release snapshot
  Resolves: RHEL-169988</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 5.87+1.git30db66dc971b-1" date="1784203200">- Update to 5.87 post-release snapshot
  Resolves: RHEL-193095</changelog>
</package>
<package pkgid="c936e1f6732120a1c202b5d02eb183405caaba077dfabec02e8e41a130977981" name="bogofilter-bogoupgrade" arch="aarch64">
  <version epoch="0" ver="1.2.5" rel="8.el9"/>
  <changelog author="Susi Lehtola &lt;jussilehtola@fedoraproject.org&gt; - 1.2.4-18" date="1566302400">- Rebuilt for GSL 2.6.</changelog>
  <changelog author="Adrian Reber &lt;adrian@lisas.de&gt; - 1.2.5-1" date="1574942400">- Updated to 1.2.5
- No longer necessary to re-package sources: All problematic files have
  been re-licensed
- All 19 patches are part of the 1.2.5 release and have been removed</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.5-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.5-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.5-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.5-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.5-6" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.2.5-7" date="1618920000">- Resolves: #1950909 (Change what files are installed)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.5-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7511bffa93ce53f79cf86552d4c74061a4d8e01e79690e5b7091aa81dc168164" name="bolt-tests" arch="aarch64">
  <version epoch="0" ver="0.9.10" rel="1.el9"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.7-1" date="1711454400">- Update to upstream release 0.9.7
- Support 'nopcie' security level</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.9.10-1" date="1761307200">- Update to the upstream version 0.9.10
- Update to 0.9.10
- Fix bolt exits when opening an empty version file
- Fix a NULL syspath variable causes SIGSEGV</changelog>
</package>
<package pkgid="892f19bffd5aa71b307e68b49a6a8993d09608371e6b15848f36b3b5d0868d2a" name="boost-mpich-python3-devel" arch="aarch64">
  <version epoch="0" ver="1.75.0" rel="13.el9_7"/>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.75.0-9" date="1732276800">- Apply upstream Boost.Asio patch to resolve RHEL-67973
- Fix %patch directive compatibility with RPM 4.20</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.75.0-10" date="1737028800">- Re-add the CMake config files provided by Boost</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 1.75.0-11" date="1747137600">- Add patch for cross-device filesystem::copy_file (RHEL-89888)</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.75.0-12" date="1751976000">- Fix the CMake config file for openmpi and mpich (RHEL-97588)</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.75.0-13" date="1762257600">- Add Boost.JSON patch for detecting endianness (RHEL-120655)</changelog>
</package>
<package pkgid="debd9b139f55df37ab0b65bb10d21548de2290cbfaefc967e52beb28354ff91c" name="boost-openmpi-python3-devel" arch="aarch64">
  <version epoch="0" ver="1.75.0" rel="13.el9_7"/>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.75.0-9" date="1732276800">- Apply upstream Boost.Asio patch to resolve RHEL-67973
- Fix %patch directive compatibility with RPM 4.20</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.75.0-10" date="1737028800">- Re-add the CMake config files provided by Boost</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 1.75.0-11" date="1747137600">- Add patch for cross-device filesystem::copy_file (RHEL-89888)</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.75.0-12" date="1751976000">- Fix the CMake config file for openmpi and mpich (RHEL-97588)</changelog>
  <changelog author="Patrick Palka &lt;ppalka@redhat.com&gt; - 1.75.0-13" date="1762257600">- Add Boost.JSON patch for detecting endianness (RHEL-120655)</changelog>
</package>
<package pkgid="bc8ca2356271873152a4a8476886b32e9ef35c2ea00eeeb0ef088ca068966763" name="brasero" arch="aarch64">
  <version epoch="0" ver="3.12.2" rel="19.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.2-10" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.2-11" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.12.2-12" date="1610020800">- Use pkgconfig for BuildRequires
- Depend on tracker only on Fedora</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 3.12.2-13" date="1611230400">- Relax Requires: icedax to Recommends</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.2-14" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.12.2-15" date="1615809600">- Switch to Tracker 3</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.12.2-16" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.12.2-17" date="1624881600">- Drop dependencies on cdrdao, cdrkit, and dvd+rw-tools for el9+ (#1973071)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.12.2-18" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.12.2-19" date="1638187200">- Improve default checksum hash algorithm (#1935460)</changelog>
</package>
<package pkgid="9b65d15ae59ff4f7530cc269deb3aaa0dcd490b382abdc273fe636131b676dbd" name="brasero-nautilus" arch="aarch64">
  <version epoch="0" ver="3.12.2" rel="19.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.2-10" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.2-11" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.12.2-12" date="1610020800">- Use pkgconfig for BuildRequires
- Depend on tracker only on Fedora</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 3.12.2-13" date="1611230400">- Relax Requires: icedax to Recommends</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.2-14" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.12.2-15" date="1615809600">- Switch to Tracker 3</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.12.2-16" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.12.2-17" date="1624881600">- Drop dependencies on cdrdao, cdrkit, and dvd+rw-tools for el9+ (#1973071)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.12.2-18" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.12.2-19" date="1638187200">- Improve default checksum hash algorithm (#1935460)</changelog>
</package>
<package pkgid="b0e0dfee2ae1978d6dfb7406b7fb0e38a0de55bd2a92386769a2b6d8e839db5f" name="brlapi-java" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="4.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.1-8" date="1594900800">- Dropped explicit brlapi dependency (brltty) and relaxed brltty
  dependency (brlapi)
  Related: rhbz#1765611</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1-9" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.1-10" date="1598011200">- OCaml 4.11.0 rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.1-11" date="1598961600">- OCaml 4.11.1 rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.1-12" date="1603195200">- Fixed brlapi.key to pass the RPM verification</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.3-1" date="1612180800">- New version
  Resolves: rhbz#1910328</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.3-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.3-3" date="1624363200">- Fixed brlapi multilib
  Resolves: rhbz#1915335</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="54fb239d22e21b0f0662e37c343c23fa299a0edfb1cedb2787143560685b022f" name="bsdcat" arch="aarch64">
  <version epoch="0" ver="3.5.3" rel="11.el9_8"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-10" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-11" date="1784203200">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="8accd92df0f2e6f02886b6c1a7f2628a866cd44f1366d6f9dbd09cd08cd7ed64" name="bsdcat" arch="aarch64">
  <version epoch="0" ver="3.5.3" rel="9.el9_7"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
</package>
<package pkgid="ca150df3ea7b5d3e21dfe9e0dddad1e2ed5d4e0afaf6bcb906acac4c886fdc36" name="bsdcpio" arch="aarch64">
  <version epoch="0" ver="3.5.3" rel="11.el9_8"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-10" date="1782820800">- Resolves: CVE-2026-14164</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-11" date="1784203200">- Related: CVE-2026-14164</changelog>
</package>
<package pkgid="4eae7003b88a93f2cfba689d0822c22d3945941aebe78ae5996de20f2b37bd1c" name="bsdcpio" arch="aarch64">
  <version epoch="0" ver="3.5.3" rel="9.el9_7"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-5" date="1749124800">- Resolves: CVE-2025-25724</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-6" date="1755086400">- Resolves: CVE-2025-5914</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-7" date="1773662400">- Resolves: CVE-2026-4111</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 3.5.3-8" date="1774353600">- Release bump</changelog>
  <changelog author="Pavol Sloboda &lt;psloboda@redhat.com&gt; - 3.5.3-9" date="1775736000">- Resolves: CVE-2026-4424
- Resolves: CVE-2026-5121</changelog>
</package>
<package pkgid="d89effad9a7a7a14e0bcf5c40ff08582a5a0471a148e4e9e734918ff4f0c6178" name="build-helper-maven-plugin" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="7.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-4" date="1676980800">- Rename package from maven-plugin-build-helper</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.0-1" date="1692273600">- Update to upstream version 3.4.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.5.0-1" date="1702555200">- Update to upstream version 3.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.6.0-1" date="1721044800">- Update to upstream version 3.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b3416016ba4a60435aac622347ba672cb0118bc01caf9bcccda74496c73878c0" name="build-helper-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="7.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-4" date="1676980800">- Rename package from maven-plugin-build-helper</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.0-1" date="1692273600">- Update to upstream version 3.4.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.5.0-1" date="1702555200">- Update to upstream version 3.5.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.0-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.0-3" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.6.0-1" date="1721044800">- Update to upstream version 3.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="2da065576f1936582c92b077c6f64373a0d000df962e1124178e10fd1801ed1a" name="butane-redistributable" arch="noarch">
  <version epoch="0" ver="0.27.0" rel="1.el9_8"/>
  <changelog author="Yasmin Valim &lt;ydesouza@redhat.com&gt; - 0.21.0-1" date="1718020800">- new version</changelog>
  <changelog author="Yasmin Valim &lt;ydesouza@redhat.com&gt; - 0.22.0-1" date="1727265600">- new version</changelog>
  <changelog author="Yasmin Valim &lt;ydesouza@redhat.com&gt; - 0.23.0-1" date="1733918400">- new version</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.24.0-1" date="1748433600">- new version</changelog>
  <changelog author="Tiago Bueno &lt;tbueno@redhat.com&gt; - 0.25.1-1" date="1759838400">- new version</changelog>
  <changelog author="Steven Presti &lt;spresti@redhat.com&gt; - 0.26.0-1" date="1768824000">- new version</changelog>
  <changelog author="Yasmin de Souza &lt;ydesouza@redhat.com&gt; - 0.27.0-1" date="1773057600">- new version</changelog>
</package>
<package pkgid="b1e3a107eec7a7707d4a505286518825444100b530efe57d9a62b2b8f88b6280" name="byaccj" arch="aarch64">
  <version epoch="0" ver="1.15" rel="27.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.15-21" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.15-22" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.15-23" date="1606305600">- Respect system-wide linker flags during build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:1.15-24" date="1606305601">- Use make_build RPM macro to comply with packaging guidelines</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15-25" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15-26" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15-27" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a62e1b6bceb9334b788cdd2af2673ce8a5ac4421d336835529aafc9d79c2540c" name="byte-buddy" arch="noarch">
  <version epoch="0" ver="1.12.10" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.16-1" date="1601380800">- Update to upstram version 1.10.16</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.20-1" date="1612440000">- Update to upstream version 1.10.20</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.20-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.20-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.12.0-1" date="1636459200">- Update to upstream version 1.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.0-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.12.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12.10-1" date="1652097600">- Update to upstream version 1.12.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.10-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a318bdd70a4946e79918d0a3432aac10d09874519782b0d86c64793ece3051aa" name="byte-buddy" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.14.2-1" date="1677153600">- Update to upstream version 1.14.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-3" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-6" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.14.2-7" date="1708430400">- Update Java source/target to 8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.14.2-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-9" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-17" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="436f6b667e3e1cabaabb7f74b385ec2edf3b0321a9ac8a45c7e3966103137868" name="byte-buddy-agent" arch="noarch">
  <version epoch="0" ver="1.12.10" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.16-1" date="1601380800">- Update to upstram version 1.10.16</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.20-1" date="1612440000">- Update to upstream version 1.10.20</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.20-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.20-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.12.0-1" date="1636459200">- Update to upstream version 1.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.0-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.12.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12.10-1" date="1652097600">- Update to upstream version 1.12.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.10-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="152d783a8dac37a2fa60fa528b54b264b1eda9086b75571c0be48a3a3df5bcea" name="byte-buddy-agent" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.14.2-1" date="1677153600">- Update to upstream version 1.14.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-3" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-6" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.14.2-7" date="1708430400">- Update Java source/target to 8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.14.2-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-9" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-17" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="0abb0889022e520ef333bfc9ed78a033dcc1bae05040f93c2647bef6aa7725f7" name="byte-buddy-javadoc" arch="noarch">
  <version epoch="0" ver="1.10.20" rel="9.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-6" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-7" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-8" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-9" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="104ff41fc26191624a2f7a949e5adc8b99e45c1c2e9b8485259998848d8855c6" name="byte-buddy-javadoc" arch="noarch">
  <version epoch="0" ver="1.12.10" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.16-1" date="1601380800">- Update to upstram version 1.10.16</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.20-1" date="1612440000">- Update to upstream version 1.10.20</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.20-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.20-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.12.0-1" date="1636459200">- Update to upstream version 1.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.0-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.12.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12.10-1" date="1652097600">- Update to upstream version 1.12.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.10-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="661ee3ff6502a6e8e170442c18107eef11892fa86f4792e9f67a7cb1d59c4012" name="byte-buddy-javadoc" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.14.2-1" date="1677153600">- Update to upstream version 1.14.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-3" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-6" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.14.2-7" date="1708430400">- Update Java source/target to 8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.14.2-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-9" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-17" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e1ff5e4792d2972d0a553c2180123268939b9dde562404620253bb1fc67c33cb" name="byte-buddy-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.10.20" rel="9.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-6" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-7" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-8" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-9" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="4d631970d59371a4299520b3128a95e4f1207b5332009ba82a75e88755b78b80" name="byte-buddy-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.12.10" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.16-1" date="1601380800">- Update to upstram version 1.10.16</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.20-1" date="1612440000">- Update to upstream version 1.10.20</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.20-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.20-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.12.0-1" date="1636459200">- Update to upstream version 1.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.0-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.12.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12.10-1" date="1652097600">- Update to upstream version 1.12.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.10-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="f0806001e0d88d02e0617d56d5b5adfbff4972d8f65b28a01518d90e11348321" name="byte-buddy-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.14.2" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.14.2-1" date="1677153600">- Update to upstream version 1.14.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-2" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-3" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-6" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.14.2-7" date="1708430400">- Update Java source/target to 8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.14.2-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.2-9" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.14.2-17" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c239d0bc378700f3370d25135aba101966d0122b7a80c3fd62b414490270a8dd" name="byte-buddy-parent" arch="noarch">
  <version epoch="0" ver="1.10.20" rel="9.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-6" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-7" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-8" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.10.20-9" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="fb1d2bf97739f08a33604cefd3ebc3e700d9f3849cf0f5010c3bcc818508ccea" name="byte-buddy-parent" arch="noarch">
  <version epoch="0" ver="1.12.10" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.16-1" date="1601380800">- Update to upstram version 1.10.16</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.14-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.10.20-1" date="1612440000">- Update to upstream version 1.10.20</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.10.20-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.20-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.12.0-1" date="1636459200">- Update to upstream version 1.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.0-2" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.12.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12.10-1" date="1652097600">- Update to upstream version 1.12.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.10-2" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="d18b83e1bcdc06d4120247ae45605c8b43933d018c6317a08d8259005ceb8c9d" name="byteman-dtest" arch="noarch">
  <version epoch="0" ver="4.0.16" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.5-5" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.5-5" date="1580212801">- Drop not needed BR jarjar. Fixes FTBFS.</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 4.0.11-1" date="1583236800">- Upgrated to latest upstream version 4.0.11
- Added a patch to fix rpm build issue caused due to misconfiguration in upstream
- Added required additional plugins required for build</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.11-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.11-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.11-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.11-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-1" date="1624017600">- Update to latest upstream 4.0.16 release for JDK 17 support.
- Drop not-needed jboss-modules BR.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.16-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f9ebab966fd430393ab8171fa2b748e250e1f7ea2bf11d236528e3c0c2e65dce" name="byteman-rulecheck-maven-plugin" arch="noarch">
  <version epoch="0" ver="4.0.16" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.5-5" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.5-5" date="1580212801">- Drop not needed BR jarjar. Fixes FTBFS.</changelog>
  <changelog author="Jayashree Huttanagoudar &lt;jhuttana@redhat.com&gt; - 4.0.11-1" date="1583236800">- Upgrated to latest upstream version 4.0.11
- Added a patch to fix rpm build issue caused due to misconfiguration in upstream
- Added required additional plugins required for build</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.11-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.11-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.11-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.11-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 4.0.16-1" date="1624017600">- Update to latest upstream 4.0.16 release for JDK 17 support.
- Drop not-needed jboss-modules BR.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.16-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="896848138c26b8930c29284d7812b4039125b86039e7fa3d73b00b3171248362" name="bzip2-static" arch="aarch64">
  <version epoch="0" ver="1.0.8" rel="11.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-9" date="1728043200">- Fix out of bounds access in BZ2_decompress
Resolves: RHEL-65198</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-10" date="1734609600">- Revert the previous commit (introduced a regression)
Resolves: CVE-2019-12900</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.0.8-11" date="1767960000">- Add the explicit Rquires to the base package
Resolves: RHEL-138675</changelog>
</package>
<package pkgid="3df1686831268af5ea7642c590de80abab89aa79ad33375d1708ec531bb2d049" name="cairo-tools" arch="aarch64">
  <version epoch="0" ver="1.17.4" rel="7.el9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 1.16.0-8" date="1587729600">- Allow empty array of operands for certain operators in CFF fonts
- Resolves: #1817958</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.0-9" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.17.4-1" date="1607688000">- Update to 1.17.4
- Tighten soname globs</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17.4-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.17.4-3" date="1615896000">- Backport an upstream patch to fix generating PDF font names (#1939399)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.17.4-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.17.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.17.4-6" date="1645444800">- Fix CVE-2020-35492 (#1911486)</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.17.4-7" date="1645444801">- Add git as BR (#1911486)</changelog>
</package>
<package pkgid="f44ef1ae7830947ad135d43b06fa9d107cf431c580ff5063a169aaecc9268dda" name="catch1-devel" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.2-5" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.2-6" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.2-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.12.2-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.12.2-10" date="1626350400">- Add tests
- Fix compilation error due to dynamic stack sizes
Resolves: rhbz#1980993</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.12.2-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8c79b82ddfbe9fa3df1e08b1cd3086f381f1e8b067229d80087cda9b74dff0de" name="cdi-api" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-7" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-9" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-10" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-14" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-16" date="1734523200">- Sync with Fedora</changelog>
</package>
<package pkgid="e212f2796e31410e4ea35428dfb9d30140edf1dcab241cecd4aff8345e284048" name="cdi-api" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-14" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0-1" date="1598184000">- Update to version 2.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-4" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.2-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-6" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="3b9b88bd61a750a85f18bc4b07fa84835bb32ca667429a2ed5e1a527493d3e92" name="cdi-api-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-7" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-8" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-9" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-10" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-11" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-12" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-13" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-14" date="1722513600">- Bump release for Aug 2024 java mass rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2.0.2-15" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-16" date="1734523200">- Sync with Fedora</changelog>
</package>
<package pkgid="5578c88d38f2ae00e68ed5cd6997029230e28825b9b71a78c513fdc095b70fa0" name="cdi-api-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-14" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0-1" date="1598184000">- Update to version 2.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-4" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.2-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-6" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5b927b83f8ec6a7f247ce732ded8439df77a837a6cfdb7a80e2cefe085bbbab7" name="cdi-api-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="7.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.2-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-6" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-7" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="4b288b6024599708f038356990f536ea7769e3757be770ed24800c7ab55c345e" name="cdi-api-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="9.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.2-6" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.0.2-7" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.0.2-8" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.0.2-9" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="bdd9a4273d89ef942e563535e2660cffbf915b42670a2b1d9de391216dfc429d" name="ceph-common" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b6be9c4108a1d05d83b12f745237228ab5274f680e52a4b8fb73dfce96e1217d" name="cglib" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="35.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-9" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-11" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-13" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-14" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-15" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-16" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-33" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="529d131330bfa00ef7b7f6e49dec88cdcf4d9b3ead55687e6d280270df4a5974" name="cglib" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.9-7" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.9-8" date="1598788800">- Remove unnecessary dependency on parent POM.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.9-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-5" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-6" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-8" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="8ad95cd61af4a00308640a98e6365500a82ed078bb613c6cf0c9000a769a8c70" name="cglib-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="35.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-9" date="1674043200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-10" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-11" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-12" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-13" date="1706011200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-14" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-15" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-16" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-33" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b8175bf3344e536dd3238847c18b4685e2ed7fb0e2e69b649277ab7163f04302" name="cglib-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.9-4" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Roland Grunberg &lt;rgrunber@redhat.com&gt; - 3.2.9-5" date="1593172800">- Set maven-javadoc-plugin source to 1.8 for Java 11 build.
- Ignore 5 test failures from upstream when run on Java 9 or above.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.9-6" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.9-7" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.9-8" date="1598788800">- Remove unnecessary dependency on parent POM.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.9-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-4" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-5" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ca26a68b10f8fc4771408caf9089613e1581390c6d46982776a634c62a1fffb4" name="cglib-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.9-7" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.9-8" date="1598788800">- Remove unnecessary dependency on parent POM.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.9-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-5" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-6" date="1642593600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-8" date="1658318400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="d0f618ddd3648f4cc62dfa91441db466d03d9b6c44121c502b3ccc5fa9286b15" name="chan-devel" arch="aarch64">
  <version epoch="0" ver="0.0.4" rel="6.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zapletal 0.0.4-1" date="1565784000">- Initial package version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="64a08ac50e37a300aece52610c52ddbdbb65a12ae9a5919965009873c524bc43" name="check-checkmk" arch="noarch">
  <version epoch="0" ver="0.15.2" rel="6.el9"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.0-2" date="1592913600">- Drop -attribute-format patch, causes other issues (bz 1850198)</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.1-1" date="1595505600">- Version 0.15.1
- Drop upstreamed -format-spec patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.1-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.1-3" date="1596456000">- Add -fail-macros patch</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.2-1" date="1596974400">- Version 0.15.2
- Drop upstreamed -fail-macros patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.15.2-3" date="1614600000">- Don't build with subinit support in RHEL</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.15.2-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.15.2-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.15.2-6" date="1635249600">- Fix the pkgconfig file for lib64 (#2016941)</changelog>
</package>
<package pkgid="5fa7d7ad361af2bc75eae478590f852d5eea709a4dff03df34b9676c80b94d2f" name="check-static" arch="aarch64">
  <version epoch="0" ver="0.15.2" rel="6.el9"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.0-2" date="1592913600">- Drop -attribute-format patch, causes other issues (bz 1850198)</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.1-1" date="1595505600">- Version 0.15.1
- Drop upstreamed -format-spec patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.1-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.1-3" date="1596456000">- Add -fail-macros patch</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0.15.2-1" date="1596974400">- Version 0.15.2
- Drop upstreamed -fail-macros patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 0.15.2-3" date="1614600000">- Don't build with subinit support in RHEL</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.15.2-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.15.2-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.15.2-6" date="1635249600">- Fix the pkgconfig file for lib64 (#2016941)</changelog>
</package>
<package pkgid="541b2d30c95de99662b27e81ff11b1226b7330a6587388f1e90ab7378e790d5b" name="cheese" arch="aarch64">
  <version epoch="2" ver="3.38.0" rel="6.el9"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2:3.34.0-1" date="1568116800">- Update to 3.34.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2:3.34.0-2" date="1579176000">- Rebuilt for libgnome-desktop soname bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:3.34.0-3" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:3.34.0-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2:3.38.0-1" date="1600171200">- Update to 3.38.0</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.38.0-2" date="1600430400">+ cheese-3.38.0-2
- Fix infinite loop on exit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:3.38.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:3.38.0-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.38.0-5" date="1627905600">- Add isa to gstreamer plugin Requires (#1988932)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:3.38.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0c9c5708d332c5adfa5e8a84cbb2370b194f634475682d3230fb5b15b8384e65" name="cheese-libs-devel" arch="aarch64">
  <version epoch="2" ver="3.38.0" rel="6.el9"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2:3.34.0-1" date="1568116800">- Update to 3.34.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2:3.34.0-2" date="1579176000">- Rebuilt for libgnome-desktop soname bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:3.34.0-3" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:3.34.0-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2:3.38.0-1" date="1600171200">- Update to 3.38.0</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.38.0-2" date="1600430400">+ cheese-3.38.0-2
- Fix infinite loop on exit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:3.38.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:3.38.0-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.38.0-5" date="1627905600">- Add isa to gstreamer plugin Requires (#1988932)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:3.38.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="bfb81b9c88a8beb3f8a4bd86e7d1abf6f7b6f441b580296a17ca9bf0ed11d37d" name="cifs-utils-info" arch="aarch64">
  <version epoch="0" ver="7.5" rel="1.el9_7"/>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-2" date="1712923200">- cifs.upcall: fix UAF in get_cachename_from_process_env()
- Resolves: RHEL-28047</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-3" date="1712923201">- pam_cifscreds: fix NULL arg warning passed to pam_syslog()
- Resolves: RHEL-28050</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-4" date="1713268800">- mount.cifs.rst: add missing reference for sssd
- mount.cifs.rst: update section about xattr/acl support
- Resolves: RHEL-22495</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.0-5" date="1713787200">- Implement CLDAP Ping to find the closest site
- Resolves: RHELPLAN-17597</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61732 - Update to version 7.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-2" date="1728475200">- Fix damaged test filename</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82680 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.4-1" date="1764158400">- resolves: RHEL-131406 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770206400">- resolves: RHEL-146305 - Enable debug logs in cifs.upcall</changelog>
</package>
<package pkgid="12a2cf56ddbf6a3cc70662d8d331dde5de840db7eb43ddc935a2e5ac3273803e" name="cifs-utils-info" arch="aarch64">
  <version epoch="0" ver="7.6" rel="2.el9_8"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-1" date="1728388800">- resolves: RHEL-61732 - Update to version 7.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 7.1-2" date="1728475200">- Fix damaged test filename</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.2-1" date="1741348800">- resolves: RHEL-82680 - Update to version 7.2</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.4-1" date="1764158400">- resolves: RHEL-110765 - fix regression with cifscreds(1)</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.5-1" date="1770120000">- resolves: RHEL-127499 - Enable debug logs in cifs.upcall</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-1" date="1782302400">- Update to version 7.6
- resolves: RHEL-185761 - CVE-2026-12505 cifs-utils: LPE via cifs.spnego</changelog>
  <changelog author="Paulo Alcantara &lt;paalcant@redhat.com&gt; - 7.6-2" date="1783425600">- resolves: RHEL-192982 - fix krb5 mount regression</changelog>
</package>
<package pkgid="67b8183c6989685ea6f926db03658319f06462cda3e0d283f0ed72d76f215e18" name="cim-schema-docs" arch="noarch">
  <version epoch="0" ver="2.43.0" rel="14.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-10" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-11" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.43.0-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.43.0-13" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.43.0-14" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e365e5ec04c464dbd723cbb608548aa0df413929b2b78bc1deedad711c0c56ec" name="clang-tools-extra-devel" arch="aarch64">
  <version epoch="0" ver="21.1.8" rel="2.el9"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.7-1" date="1765454400">- Update to 21.1.7</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.8-1" date="1767441600">- Update LLVM Toolset to 21.1.8 [rhel-9]</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.8-2" date="1771416000">- Remove compat libs for LLVM 20</changelog>
</package>
<package pkgid="d559573dd0bce1b7bc00be24688c06d2366dacb9f3f1d2ef69acbef8fb5c3012" name="classloader-leak-test-framework" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-9" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.1-10" date="1589457600">- removed javadoc, as it is broken as tooling is not ready for jdk11</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.1.1-11" date="1589544000">- fixed javadoc build problem</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.1-12" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-13" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-14" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-15" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c7e85fa9f3a98f90dba9afc3f04923cc14180965f59804ad4a51eff350bf1269" name="classloader-leak-test-framework-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-9" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.1-10" date="1589457600">- removed javadoc, as it is broken as tooling is not ready for jdk11</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.1.1-11" date="1589544000">- fixed javadoc build problem</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.1-12" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-13" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-14" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-15" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b43a64f6c163206a2e302a4729a0cba9a24e77c62851c65ca7b0801673acfafc" name="cldr-emoji-annotation-devel" arch="noarch">
  <version epoch="0" ver="39" rel="2.el9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@gmail.com&gt; - 1:38-1" date="1604232000">- Bump release-38</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@gmail.com&gt; - 1:38-1.1" date="1608292800">- Bump to release-38-1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:38-2.1" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@gmail.com&gt; - 1:39~alpha0-1" date="1612785600">- Bump release-39-alpha0</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@gmail.com&gt; - 1:39~alpha1-1" date="1613563200">- Bump to release-39-alpha1</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@gmail.com&gt; - 1:39~alpha4-1" date="1614772800">- Bump to release-39-alpha4</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@gmail.com&gt; - 1:39~beta-1" date="1616673600">- Bump to release-39-beta</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 39~beta-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@gmail.com&gt; - 39-1" date="1621857600">- Bump to release-39. Related: rhbz#1963078</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 39-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="63aff2f20cf4987a01334d3a8565557e91bded438c57eade256536d92ba1c771" name="cloud-utils" arch="aarch64">
  <version epoch="0" ver="0.33" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.31-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.31-9" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.31-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Camilla Conte &lt;cconte@redhat.com&gt; - 0.33-1" date="1666180800">- Rebase to 0.33
  Resolves: bz#2133248</changelog>
</package>
<package pkgid="ec161fa7195ee0188ae5920add4d5637a72748337ea922dd6c004d2e58754ecf" name="clutter-devel" arch="aarch64">
  <version epoch="0" ver="1.26.4" rel="7.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.26.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.26.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.26.4-7" date="1643976000">- Enable LTO
  Resolves: rhbz#1986479</changelog>
</package>
<package pkgid="742df6c7db63b2da81cd24d21c0b562ace7d83430745366e16c9709f3e0dba5b" name="clutter-doc" arch="aarch64">
  <version epoch="0" ver="1.26.4" rel="7.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.26.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.26.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.26.4-7" date="1643976000">- Enable LTO
  Resolves: rhbz#1986479</changelog>
</package>
<package pkgid="e165ea5e00296b668f14934493edf49165c82b2483d4420fe63e7b03f7f91a24" name="clutter-gst3-devel" arch="aarch64">
  <version epoch="0" ver="3.0.27" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.27-3" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.27-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.27-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.27-6" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.27-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b68915b062533febe519c0590d2dbf3e03d529d556ed61036f4bee78303488da" name="clutter-gtk-devel" arch="aarch64">
  <version epoch="0" ver="1.8.4" rel="13.el9"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1.8.4-8" date="1593518400">Disable LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.4-9" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.4-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.4-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.4-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.8.4-13" date="1643976000">- Enable LTO
  Resolves: rhbz#1986492</changelog>
</package>
<package pkgid="1c977675ab0a8ddd6a7999d8bb44f39bcbd745d46b9ea6cfd6bb7b52a00472d9" name="clutter-tests" arch="aarch64">
  <version epoch="0" ver="1.26.4" rel="7.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.26.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.26.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.26.4-7" date="1643976000">- Enable LTO
  Resolves: rhbz#1986479</changelog>
</package>
<package pkgid="dd7174d812dfcc661ba82e8e12e0b1ea3f4234b37dc3451cd11c69c639892c7b" name="cmocka-doc" arch="noarch">
  <version epoch="0" ver="1.1.5" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-3" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1.1.5-4" date="1593604800">- Disable LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-6" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.5-7" date="1596628800">- Correctly build with new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.5-9" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.5-10" date="1624536000">- resolves: rhbz#1915369 - Split out a cmocka-doc package</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.5-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="db64502894e304f967ab0dda808874665a8d83ff93bd48e278045fc088dea75f" name="cogl-devel" arch="aarch64">
  <version epoch="0" ver="1.22.8" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-3" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.22.4-4" date="1583582400">- Fix building against libglvnd-provided EGL headers</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.22.6-1" date="1583755200">- Update to 1.22.6</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.22.8-1" date="1591272000">- Update to 1.22.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.8-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.8-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.8-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.8-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c15bdfac568d407874a74ae2048e3a0c365227e861dee13a81c28bb4ebcfa53a" name="cogl-doc" arch="noarch">
  <version epoch="0" ver="1.22.8" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-3" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.22.4-4" date="1583582400">- Fix building against libglvnd-provided EGL headers</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.22.6-1" date="1583755200">- Update to 1.22.6</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.22.8-1" date="1591272000">- Update to 1.22.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.8-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.8-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.8-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.8-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0fb0e151247062ec3ac8b290ca7a4449612583f3689f71a37cc9dccea8aa0f5b" name="cogl-tests" arch="aarch64">
  <version epoch="0" ver="1.22.8" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-3" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.22.4-4" date="1583582400">- Fix building against libglvnd-provided EGL headers</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.22.6-1" date="1583755200">- Update to 1.22.6</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.22.8-1" date="1591272000">- Update to 1.22.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.8-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.8-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.8-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.8-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e8e3ab5e7e3b7bb57b8d08d31d0c902cec214e191b52a2c3c3b04b1e8f417930" name="colord-extra-profiles" arch="noarch">
  <version epoch="0" ver="1.4.5" rel="6.el9_6"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 1.4.5-5" date="1740484800">- Provide a sysusers.d file</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; 1.4.5-6" date="1742817600">- Bump release to match upstream</changelog>
</package>
<package pkgid="ed79e65c5dabf15b92c75001cddc65da9fc73eee5f7278cf11b6502e24dbfcf0" name="colord-tests" arch="aarch64">
  <version epoch="0" ver="1.4.5" rel="6.el9_6"/>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; 1.4.5-5" date="1740484800">- Provide a sysusers.d file</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; 1.4.5-6" date="1742817600">- Bump release to match upstream</changelog>
</package>
<package pkgid="8423c3d8ac3d4782a7d5a98b5b742b82a145578561cd448fa97d19c2ce57b162" name="compat-libpthread-nonshared" arch="aarch64">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="9123cad47e0ae1a950246d5212cd31078d632d971098f182287fb39048e01479" name="compat-libpthread-nonshared" arch="aarch64">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="13746d65957d11567b0400980194ab94a362aab29e09babbb826737346608bda" name="compat-libpthread-nonshared" arch="aarch64">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="f3f489622c1b8cde1dec2b007429135d9c2668a34cfde4b36f27c7842fb62c64" name="compat-libpthread-nonshared" arch="aarch64">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="fde0e596620d9e6e2c7b01b87a8f2153c12de8528739e6b9e18a65a1b9c8c771" name="compat-libpthread-nonshared" arch="aarch64">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="185774ea6bc23b6f1cb39dd9dde43226b3dd33d37d071536aaace3e00b846e10" name="compat-libtiff3" arch="aarch64">
  <version epoch="0" ver="3.9.4" rel="15.el9"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-14" date="1613995200">- Initial package for RHEL 9</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 3.9.4-15" date="1631102400">- Rebuild to fix synchronization with RHEL
  related: #1990361</changelog>
</package>
<package pkgid="89ade9f0975565debccc31f6a7b99b590bd75549dd3cdd1d6435444bccc559a7" name="container-tools-tests" arch="noarch">
  <version epoch="0" ver="1" rel="15.el9"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1-14" date="1701864000">- rebuild with updated dependencies:
  [python-]podman 4.8.0, buildah 1.33.2, skopeo 1.14.0,
  aardvark-dns and netavark 1.9.0
- Related: Jira:RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1-15" date="1761566400">- Fix typo in package Summary
- Resolves: RHEL-124398</changelog>
</package>
<package pkgid="a7a41a0a72c4d38aff1c4e3e35b732e1d574348e29a0ac6bbb657385b9c8c0cf" name="corosync-qdevice-devel" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="1.el9"/>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.2-3" date="1739880000">- Resolves: RHEL-7637

- Add support for sysusers.d functionality (RHEL-7637)</changelog>
  <changelog author="Jan Friesse &lt;jfriesse@redhat.com&gt; - 3.0.4-1" date="1764072000">- Resolves: RHEL-123650
- Resolves: RHEL-67471

- New upstream release (RHEL-123650)
- Support for running corosync-qnetd-tool and corosync-qdevice-tool
  as a non-root user (RHEL-67471)</changelog>
</package>
<package pkgid="18f33e6721aeba0c94c172d65ffb696ee07e9995b2a628bc83fb362b04e0c659" name="cppunit-doc" arch="aarch64">
  <version epoch="0" ver="1.15.1" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-3" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.15.1-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-6" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.15.1-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.15.1-8" date="1643198400">- Resolves: rhbz#2040997 skip cppunit-devel</changelog>
</package>
<package pkgid="8e2b705d2f6b2d72f31192b562fc8dc581d5ddc90bb98a2cd14d89974722643d" name="culmus-shofar-fonts" arch="noarch">
  <version epoch="0" ver="0.130" rel="20.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.130-16" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.130-17" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.130-18" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.130-19" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.130-20" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="626b62d13ec2f4c15f6dcfe0f294a93ca48d2b21ec5a253974ba194d70e92eb0" name="cyrus-imapd-devel" arch="aarch64">
  <version epoch="0" ver="3.4.8" rel="4.el9"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.1-11" date="1707393600">- Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
  for shared mailboxes
- cyrus-imapd.spec: rename patches to correspond with others</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.8-1" date="1717588800">- Update to 3.4.8, fixing CVE-2024-34055</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.4.8-2" date="1733832000">- tls: enable automatic DH parameter selection
  Resolves: RHEL-70762</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.8-3" date="1764936000">- Remove sscg option --package from cyrus-imapd-init.service
  Resolves: RHEL-132242</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.8-4" date="1765540800">- Create directory structure under /var using tmpfiles.d
  Resolves: RHEL-129881</changelog>
</package>
<package pkgid="10341c27b584142bd506cb1599d718c790c69f9a844bcc762476c50260967c5d" name="cyrus-imapd-doc-extra" arch="noarch">
  <version epoch="0" ver="3.4.8" rel="4.el9"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.1-11" date="1707393600">- Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
  for shared mailboxes
- cyrus-imapd.spec: rename patches to correspond with others</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.8-1" date="1717588800">- Update to 3.4.8, fixing CVE-2024-34055</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.4.8-2" date="1733832000">- tls: enable automatic DH parameter selection
  Resolves: RHEL-70762</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.8-3" date="1764936000">- Remove sscg option --package from cyrus-imapd-init.service
  Resolves: RHEL-132242</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.8-4" date="1765540800">- Create directory structure under /var using tmpfiles.d
  Resolves: RHEL-129881</changelog>
</package>
<package pkgid="c0ce467fca99dfeb0e9216ecd338fc8a4ac808f9d329e6003470c3cdcba08686" name="cyrus-imapd-virusscan" arch="aarch64">
  <version epoch="0" ver="3.4.8" rel="4.el9"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.1-11" date="1707393600">- Resolves: RHEL-20925 - Seen/Unseen Flag not working correctly
  for shared mailboxes
- cyrus-imapd.spec: rename patches to correspond with others</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.8-1" date="1717588800">- Update to 3.4.8, fixing CVE-2024-34055</changelog>
  <changelog author="Joe Orton &lt;jorton@redhat.com&gt; - 3.4.8-2" date="1733832000">- tls: enable automatic DH parameter selection
  Resolves: RHEL-70762</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.8-3" date="1764936000">- Remove sscg option --package from cyrus-imapd-init.service
  Resolves: RHEL-132242</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.4.8-4" date="1765540800">- Create directory structure under /var using tmpfiles.d
  Resolves: RHEL-129881</changelog>
</package>
<package pkgid="f56867063a8a343e1eb57f59d04ca1f4443cd107bf9fa607e471801ea1d9a159" name="datefudge" arch="aarch64">
  <version epoch="0" ver="1.24" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22-6" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 1.23-1" date="1581422400">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikos Mavrogiannopoulos &lt;nmav@redhat.com&gt; - 1.24-1" date="1602504000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.24-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.24-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.24-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e509d55239c7b7e955e7d7291bd19f978531083a411d803ed026a8402a33e56a" name="dbus-doc" arch="noarch">
  <version epoch="1" ver="1.12.20" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.12.20-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-6" date="1660737600">- Override upstream sysusers.d confguration (#2118226)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-7" date="1666094400">- Fix CVE-2022-42010 (#2133647)
- Fix CVE-2022-42011 (#2133641)
- Fix CVE-2022-42012 (#2133635)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-8" date="1686571200">- Fix CVE-2023-34969 (#2213402)</changelog>
</package>
<package pkgid="320e8b0f83c11ab45863ce62811f69888a9509c27bc8f73ae2e6778d1987220d" name="dbus-tests" arch="aarch64">
  <version epoch="1" ver="1.12.20" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.12.20-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-6" date="1660737600">- Override upstream sysusers.d confguration (#2118226)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-7" date="1666094400">- Fix CVE-2022-42010 (#2133647)
- Fix CVE-2022-42011 (#2133641)
- Fix CVE-2022-42012 (#2133635)</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1:1.12.20-8" date="1686571200">- Fix CVE-2023-34969 (#2213402)</changelog>
</package>
<package pkgid="f9e8ac411168cc69d51a52e78c67397c9015fd9edc911ee812a21f6a74c8ab36" name="dejavu-fonts-all" arch="noarch">
  <version epoch="0" ver="2.37" rel="18.el9"/>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1582372800">- 2.37-5
✅ Rebuild with fonts-rpm-macros 2.0.2</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1583150400">- 2.37-6
✅ Lint, lint, lint and lint again</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1583755200">- 2.37-7
✅ Remove F32 compatibility packages</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1585828800">- 2.37-12
👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1587988800">- 2.37-13
🐞 Workaround Fedora problems created by rpm commit 93604e2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt;" date="1599220800">- 2.37-15
- Fix this spec file to build for F33+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-16" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.37-17.gitversion_2_37" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.37-18.gitversion_2_37" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cc97f2873cdffcac7f87f36dcf5223e9a28c9a3b0fd2aab9b8e4f7dbdb5663a6" name="dejavu-fonts-doc" arch="noarch">
  <version epoch="0" ver="2.37" rel="18.el9"/>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1582372800">- 2.37-5
✅ Rebuild with fonts-rpm-macros 2.0.2</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1583150400">- 2.37-6
✅ Lint, lint, lint and lint again</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1583755200">- 2.37-7
✅ Remove F32 compatibility packages</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1585828800">- 2.37-12
👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1587988800">- 2.37-13
🐞 Workaround Fedora problems created by rpm commit 93604e2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt;" date="1599220800">- 2.37-15
- Fix this spec file to build for F33+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-16" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.37-17.gitversion_2_37" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.37-18.gitversion_2_37" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4f35d436d9c20bb77b1271b830c188aa925fba53d8a6fc7a9f1819cfaff6f963" name="dejavu-lgc-fonts-all" arch="noarch">
  <version epoch="0" ver="2.37" rel="18.el9"/>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1582372800">- 2.37-5
✅ Rebuild with fonts-rpm-macros 2.0.2</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1583150400">- 2.37-6
✅ Lint, lint, lint and lint again</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1583755200">- 2.37-7
✅ Remove F32 compatibility packages</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1585828800">- 2.37-12
👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1587988800">- 2.37-13
🐞 Workaround Fedora problems created by rpm commit 93604e2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt;" date="1599220800">- 2.37-15
- Fix this spec file to build for F33+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.37-16" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.37-17.gitversion_2_37" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.37-18.gitversion_2_37" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="bbe2915eb3b9a66502d3eb725ff54c05a96f1fed60d560ab801c647274e0bfab" name="dhcp-devel" arch="aarch64">
  <version epoch="12" ver="4.4.2" rel="20.b1.el9"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.2-20.b1" date="1767787200">- Create /var/lib/dhcpd through systemd-tmpfiles
  Resolves: RHEL-134207</changelog>
</package>
<package pkgid="2c87f870be4afd04d3ed6a874eea7474c8f17f8e5f0916772cc24b3fe4f70115" name="dhcp-devel-doc" arch="noarch">
  <version epoch="12" ver="4.4.2" rel="20.b1.el9"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.2-20.b1" date="1767787200">- Create /var/lib/dhcpd through systemd-tmpfiles
  Resolves: RHEL-134207</changelog>
</package>
<package pkgid="e66012fe3a50a7f4f107c40e31ae712cdf8248d4add13add1b2c44d8fc33b1f4" name="dhcp-libs-static" arch="aarch64">
  <version epoch="12" ver="4.4.2" rel="20.b1.el9"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 12:4.4.2-20.b1" date="1767787200">- Create /var/lib/dhcpd through systemd-tmpfiles
  Resolves: RHEL-134207</changelog>
</package>
<package pkgid="51c9672beb75191cde2ae63892d11392f82ce9a4bd284934ed8a6fd5122076b6" name="dialog-devel" arch="aarch64">
  <version epoch="0" ver="1.3" rel="32.20210117.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1.3-23.20191210" date="1576065600">- update to 1.3-20191210</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-24.20191210" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1.3-25.20200228" date="1583755200">- update to 1.3-20200228</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1.3-26.20200327" date="1585656000">- update to 1.3-20200327</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-27.20200327" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1.3-28.20201126" date="1606478400">- update to 1.3-20201126</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; - 1.3-29.20210117" date="1610971200">- update to 1.3-20210117</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-30.20210117" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3-31.20210117" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3-32.20210117" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f9ec0ec3602be06814a630f4cc72ed96ae5091f744e336442e3f5713cdab9359" name="disruptor" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="26.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.4-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.4-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.4-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-12" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.4-24" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="ae40c6b88801c4a14dad52b7b77d40cf2616956cee50bc6491efcde30a06d36b" name="disruptor-javadoc" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="2.el9"/>
  <changelog author="Alexander Scheel &lt;ascheel@redhat.com&gt; - 3.4.2-1" date="1589284800">- Rebase to disruptor upstream release v3.4.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-5" date="1624881600">- Remove unneeded buildrequires on jmock and hamcrest</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-6" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 3.4.4-1" date="1639396800">- Update disruptor to 3.4.4 (#1953941)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.4-2" date="1645617600">- Build with OpenJDK 8</changelog>
</package>
<package pkgid="fb6b2767181d2cd2e786f433e923f54d8568f62b1379e982b1a6826538710c73" name="disruptor-javadoc" arch="noarch">
  <version epoch="0" ver="3.4.4" rel="26.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-6" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.4-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-8" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.4-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.4-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-12" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.4-24" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="152709ef3d7e4fb23189ef4463485cef8bdf758c03609c56c7b6e2fb3c44d6c2" name="dlm-devel" arch="aarch64">
  <version epoch="0" ver="4.3.0" rel="3.el9_7"/>
  <changelog author="David Teigland &lt;teigland@redhat.com&gt; - 4.3.0-1" date="1715774400">- new upstream version</changelog>
  <changelog author="Alexander Aring &lt;aahringo@redhat.com&gt; - 4.3.0-2" date="1770379200">- Rebuild for posix lock issue fix
  Related: RHEL-143037</changelog>
  <changelog author="Alexander Aring &lt;aahringo@redhat.com&gt; - 4.3.0-3" date="1770379201">- Trigger build
  Related: RHEL-143037</changelog>
</package>
<package pkgid="c96a667a93d19cc5c63628cb0b400b3877ca7b201650835a995917f19da04a4e" name="docbook-utils-pdf" arch="noarch">
  <version epoch="0" ver="0.6.14" rel="54.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.14-49" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.14-50" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.6.14-51" date="1610971200">- suggest lynx rather than elinks to satisfy text-www-browser</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.14-52" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.14-53" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.14-54" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="99e52b83c2a830ad548996effde3ad78950331ccace16aaebed5652915d900ff" name="dotnet" arch="aarch64">
  <version epoch="0" ver="3.1.118" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.113-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.113-3" date="1619006400">- Fix build by adding CentOS 9 RIDs
- Resolves: RHBZ#1951312</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-1" date="1621339200">- Update to .NET SDK 3.1.115 and Runtime 3.1.15
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-2" date="1623067200">- Support building against OpenSSL 3.0
- Resolves: RHBZ#1965045</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.116-1" date="1623412800">- Update to .NET SDK 3.1.116 and Runtime 3.1.16
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-1" date="1628769600">- Update to .NET SDK 3.1.117 and Runtime 3.1.17
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-2" date="1629806400">- Fix building and running against OpenSSL 3.0
- Resolves: RHBZ#1991050</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.118-1" date="1630065600">- Update to .NET SDK 3.1.118 and Runtime 3.1.18
- Resolves: RHBZ#1961848</changelog>
</package>
<package pkgid="58b4cbf4215af7349321418f47702b77ebe52b583c14d7529cef41b2816e4b47" name="dotnet-apphost-pack-3.1" arch="aarch64">
  <version epoch="0" ver="3.1.18" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.113-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.113-3" date="1619006400">- Fix build by adding CentOS 9 RIDs
- Resolves: RHBZ#1951312</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-1" date="1621339200">- Update to .NET SDK 3.1.115 and Runtime 3.1.15
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-2" date="1623067200">- Support building against OpenSSL 3.0
- Resolves: RHBZ#1965045</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.116-1" date="1623412800">- Update to .NET SDK 3.1.116 and Runtime 3.1.16
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-1" date="1628769600">- Update to .NET SDK 3.1.117 and Runtime 3.1.17
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-2" date="1629806400">- Fix building and running against OpenSSL 3.0
- Resolves: RHBZ#1991050</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.118-1" date="1630065600">- Update to .NET SDK 3.1.118 and Runtime 3.1.18
- Resolves: RHBZ#1961848</changelog>
</package>
<package pkgid="eb564f3b69d3fb3850e312d6ab0b454ca4ce9cd0bd6dddf3a29f923581d541ae" name="dotnet-hostfxr-3.1" arch="aarch64">
  <version epoch="0" ver="3.1.18" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.113-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.113-3" date="1619006400">- Fix build by adding CentOS 9 RIDs
- Resolves: RHBZ#1951312</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-1" date="1621339200">- Update to .NET SDK 3.1.115 and Runtime 3.1.15
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-2" date="1623067200">- Support building against OpenSSL 3.0
- Resolves: RHBZ#1965045</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.116-1" date="1623412800">- Update to .NET SDK 3.1.116 and Runtime 3.1.16
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-1" date="1628769600">- Update to .NET SDK 3.1.117 and Runtime 3.1.17
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-2" date="1629806400">- Fix building and running against OpenSSL 3.0
- Resolves: RHBZ#1991050</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.118-1" date="1630065600">- Update to .NET SDK 3.1.118 and Runtime 3.1.18
- Resolves: RHBZ#1961848</changelog>
</package>
<package pkgid="44379fe90071ffdf66c4870f8081d3da53d1596b75b70e01728f2c12250d191f" name="dotnet-runtime-3.1" arch="aarch64">
  <version epoch="0" ver="3.1.18" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.113-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.113-3" date="1619006400">- Fix build by adding CentOS 9 RIDs
- Resolves: RHBZ#1951312</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-1" date="1621339200">- Update to .NET SDK 3.1.115 and Runtime 3.1.15
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-2" date="1623067200">- Support building against OpenSSL 3.0
- Resolves: RHBZ#1965045</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.116-1" date="1623412800">- Update to .NET SDK 3.1.116 and Runtime 3.1.16
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-1" date="1628769600">- Update to .NET SDK 3.1.117 and Runtime 3.1.17
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-2" date="1629806400">- Fix building and running against OpenSSL 3.0
- Resolves: RHBZ#1991050</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.118-1" date="1630065600">- Update to .NET SDK 3.1.118 and Runtime 3.1.18
- Resolves: RHBZ#1961848</changelog>
</package>
<package pkgid="449b44471313c63187398b6599a63ab2ed844aa8db35ee21afcc9c6b045a343f" name="dotnet-sdk-3.1" arch="aarch64">
  <version epoch="0" ver="3.1.118" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.113-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.113-3" date="1619006400">- Fix build by adding CentOS 9 RIDs
- Resolves: RHBZ#1951312</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-1" date="1621339200">- Update to .NET SDK 3.1.115 and Runtime 3.1.15
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-2" date="1623067200">- Support building against OpenSSL 3.0
- Resolves: RHBZ#1965045</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.116-1" date="1623412800">- Update to .NET SDK 3.1.116 and Runtime 3.1.16
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-1" date="1628769600">- Update to .NET SDK 3.1.117 and Runtime 3.1.17
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-2" date="1629806400">- Fix building and running against OpenSSL 3.0
- Resolves: RHBZ#1991050</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.118-1" date="1630065600">- Update to .NET SDK 3.1.118 and Runtime 3.1.18
- Resolves: RHBZ#1961848</changelog>
</package>
<package pkgid="8a52203be7c33f6a59050386aa0fed29cd014882d6d9e8880b032691167d8fe5" name="dotnet-sdk-3.1-source-built-artifacts" arch="aarch64">
  <version epoch="0" ver="3.1.118" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.113-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.113-3" date="1619006400">- Fix build by adding CentOS 9 RIDs
- Resolves: RHBZ#1951312</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-1" date="1621339200">- Update to .NET SDK 3.1.115 and Runtime 3.1.15
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-2" date="1623067200">- Support building against OpenSSL 3.0
- Resolves: RHBZ#1965045</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.116-1" date="1623412800">- Update to .NET SDK 3.1.116 and Runtime 3.1.16
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-1" date="1628769600">- Update to .NET SDK 3.1.117 and Runtime 3.1.17
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-2" date="1629806400">- Fix building and running against OpenSSL 3.0
- Resolves: RHBZ#1991050</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.118-1" date="1630065600">- Update to .NET SDK 3.1.118 and Runtime 3.1.18
- Resolves: RHBZ#1961848</changelog>
</package>
<package pkgid="d7cad593cecc620fa27fc563bac226886b2d5ab605a5eff3f4a758aa4b91d921" name="dotnet-targeting-pack-3.1" arch="aarch64">
  <version epoch="0" ver="3.1.18" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.113-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.113-3" date="1619006400">- Fix build by adding CentOS 9 RIDs
- Resolves: RHBZ#1951312</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-1" date="1621339200">- Update to .NET SDK 3.1.115 and Runtime 3.1.15
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-2" date="1623067200">- Support building against OpenSSL 3.0
- Resolves: RHBZ#1965045</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.116-1" date="1623412800">- Update to .NET SDK 3.1.116 and Runtime 3.1.16
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-1" date="1628769600">- Update to .NET SDK 3.1.117 and Runtime 3.1.17
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-2" date="1629806400">- Fix building and running against OpenSSL 3.0
- Resolves: RHBZ#1991050</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.118-1" date="1630065600">- Update to .NET SDK 3.1.118 and Runtime 3.1.18
- Resolves: RHBZ#1961848</changelog>
</package>
<package pkgid="d4dc0b666708ea56d95fdfb745a7cf6c0c500be9bc3eecd41a2bf990dbd7a806" name="dotnet-templates-3.1" arch="aarch64">
  <version epoch="0" ver="3.1.118" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.113-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.113-3" date="1619006400">- Fix build by adding CentOS 9 RIDs
- Resolves: RHBZ#1951312</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-1" date="1621339200">- Update to .NET SDK 3.1.115 and Runtime 3.1.15
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.115-2" date="1623067200">- Support building against OpenSSL 3.0
- Resolves: RHBZ#1965045</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.116-1" date="1623412800">- Update to .NET SDK 3.1.116 and Runtime 3.1.16
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.116-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-1" date="1628769600">- Update to .NET SDK 3.1.117 and Runtime 3.1.17
- Resolves: RHBZ#1961848</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.117-2" date="1629806400">- Fix building and running against OpenSSL 3.0
- Resolves: RHBZ#1991050</changelog>
  <changelog author="Omair Majid &lt;omajid@redhat.com&gt; - 3.1.118-1" date="1630065600">- Update to .NET SDK 3.1.118 and Runtime 3.1.18
- Resolves: RHBZ#1961848</changelog>
</package>
<package pkgid="85d3b3ef9111acb72613b791d62fef525415798647b43c9d8abb212d52c4893d" name="double-conversion-static" arch="aarch64">
  <version epoch="0" ver="3.1.5" rel="6.el9"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 3.1.5-1" date="1569153600">- Update to 3.1.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.5-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.5-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.5-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.5-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.5-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="45f411a0e9a2c984b9a31646f04a9d6d60e09d3052979e8930c921007de9da4c" name="doxygen2man" arch="aarch64">
  <version epoch="0" ver="2.0.8" rel="1.el9"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.3-4" date="1641556800">- Add async connect call for Pacemaker
  Resolves: rhbz#bz2031865</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.3-5" date="1641816000">- Add gating.yaml from RHEL
  Resolves: rhbz#bz2031865</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.3-6" date="1641816001">- Fix gating.yaml for RHEL-9
  Resolves: rhbz#bz2031865</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.3-7" date="1642593600">- Bump soname for async-connect API addition
  Resolves: rhbz#bz2031865</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.3-8" date="1646308800">- Fix negative errno in qb_ipcc_connect (introduced in 2.0.3-4)
  Resolves: rhbz#2057527</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.6-1" date="1650456000">- Rebase to 2.0.6
  Resolves: rhbz#2072903</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.6-1" date="1669896000">- ipc: Retry receiving credentials if the the message is short
  Resolves: rhbz2149647</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.6-3" date="1693569600">- blackbox: fix buffer overflow with long log lines
  Resolves: rhbz#2236171</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.6-4" date="1694174400">- bump rpm version for rhel-exception build
  Resolves: rhbz#2230712</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.8-1" date="1696420800">- Rebase to 2.0.8
  Resolves: rhbz#2223950</changelog>
</package>
<package pkgid="aa7ea35d417db592b2429c6375bcd734dcd9e678fdcafde0effb9ea5acae0bde" name="drm-utils" arch="aarch64">
  <version epoch="0" ver="2.4.128" rel="1.el9"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.120-1" date="1716811200">- Update to 2.4.120
- Fix findings from static application security testing (SAST)</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.121-1" date="1717588800">- Update to 2.4.121</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-1" date="1731412800">- Update to 2.4.123
  Resolves: https://issues.redhat.com/browse/RHEL-53869</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.4.123-2" date="1731499200">- Revert upstream commit ffaa3ce144be ("2.4.122, Build Intel on all arches")
  libpciaccess is not available in RHEL 9 aarch64, ppc64le and s390x
  Resolves: https://issues.redhat.com/browse/RHEL-53869</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-1" date="1760961600">- Update to 2.4.127
  amdgpu-apu.patch: Read model name from /proc/cpuinfo for APUs</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.127-2" date="1761134400">- Added amdgpu-slice.patch and amdgpu-fallback.patch</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 2.4.128-1" date="1763380800">- Update to 2.4.128-1</changelog>
</package>
<package pkgid="e5e738c43c00203bea9351dafbaeaba12e00f2ba0cdd9700d7698e3d470f3d46" name="e2fsprogs-static" arch="aarch64">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="a56294e50415872f7cf1fe8c8f4e96c06646da61599af51f1231d8022ef9d55d" name="e2scrub" arch="aarch64">
  <version epoch="0" ver="1.46.5" rel="8.el9"/>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-4" date="1697544000">- Change the xattr entry hash to use an unsighed char by default
- Related: RHEL-10467</changelog>
  <changelog author="Carlos Maiolino &lt;cmaiolino@redhat.com&gt; - 1.46.5-5" date="1702468800">- rebuild to incorporate libss-devel package
- Related: RHEL-19059</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-6" date="1734091200">- Bump release to perform build verification for gating changes
- Related: RHEL-71250</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt; - 1.46.5-7" date="1737720000">- Fix: e2fsprogs: online resize fails
- Related: RHEL-76095</changelog>
  <changelog author="Pavel Reichl &lt;preichl@redhat.com&gt;" date="1751630400">- ext2fs: make sure we have at least EXT2_FIRST_INO + 1 inodes</changelog>
</package>
<package pkgid="f78b63111b4ac56b8c47c9a078eb1b261bc7f771cd9ba6cadc1de6e21fa165a3" name="easymock" arch="noarch">
  <version epoch="0" ver="4.2" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-7" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 4.2-1" date="1598875200">- Update to version 4.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-4" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2-5" date="1635854400">- Workaround build issue with OpenJDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-8" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="36cc2a38b96b4b1ec77f32baa431adfa1c77a325a4995a0e9253beb11d180467" name="easymock" arch="noarch">
  <version epoch="0" ver="4.3" rel="20.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.3-7" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.3-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3-9" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-10" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3-17" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="a5bdc9da8de78d11de5b5d5f67b82f49f6f76fcd73f1a936fa7a26a3220b07ea" name="easymock-javadoc" arch="noarch">
  <version epoch="0" ver="4.2" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-5" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2-1" date="1583323200">- Update to upstream version 4.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6-6" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-7" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 4.2-1" date="1598875200">- Update to version 4.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2-4" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2-5" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.2-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="37afbe09f678de83908a3e423adeb9ba1ee3ed9042a4f6dd006c35f49efea515" name="easymock-javadoc" arch="noarch">
  <version epoch="0" ver="4.2" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-7" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 4.2-1" date="1598875200">- Update to version 4.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-4" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2-5" date="1635854400">- Workaround build issue with OpenJDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2-8" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="cf96ff93cac80f2bbb951780f1b3d47e1d63edac778849b417a41e6bab3b7fee" name="easymock-javadoc" arch="noarch">
  <version epoch="0" ver="4.3" rel="20.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-3" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-5" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.3-7" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.3-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3-9" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.3-10" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3-17" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="0ed4ed24cfbd3fef7f67a0fe6f7d8c24fda8fd318b8e1d4020470e197649c789" name="efitools" arch="aarch64">
  <version epoch="0" ver="1.9.2" rel="9.el9"/>
  <changelog author="Vladislav Kazakov &lt;vpackager@gmail.com&gt; - 1.9.2-1" date="1610884800">- Initial SPEC release.</changelog>
  <changelog author="Vladislav Kazakov &lt;vpackager@gmail.com&gt; - 1.9.2-2" date="1612094400">- Add BSD license.
- Rename LGPLv2.1 to LGPLv2. 
- Add reference to issue about mktemp usage.</changelog>
  <changelog author="Vladislav Kazakov &lt;vpackager@gmail.com&gt; - 1.9.2-3" date="1612612800">- Add system flags to CFLAGS.
- Remove i686 support.</changelog>
  <changelog author="Vladislav Kazakov &lt;vpackager@gmail.com&gt; - 1.9.2-4" date="1615118400">- Fix incorrect build.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.2-5" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.9.2-6" date="1631620800">- Rebuilt with OpenSSL 3.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.2-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.2-8" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.9.2-9" date="1671019200">- C99 port</changelog>
</package>
<package pkgid="47ceafe13e9003f04f15daec4392e96e5568c20aaf243d252f0c9f8d7f64511c" name="efs-utils" arch="noarch">
  <version epoch="0" ver="1.35.1" rel="7.el9"/>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 1.31.38-1" date="1693915200">- Initial package for version 1.31.38</changelog>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 1.35.0-2" date="1696939200">- Add patch for ignoring the fsap option.</changelog>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 1.35.0-3" date="1700049600">- Added deprecation warning patch.
- Added SELinux policies. (RHEL-14154)</changelog>
  <changelog author="fkolwa &lt;fkolwa@redhat.com&gt; - 1.35.0-4" date="1700222400">- Refactor watchdog service name</changelog>
  <changelog author="Felix Kolwa &lt;fkolwa@redhat.com&gt; - 1.35.0-5" date="1701950400">- Bump release to 5 to include selinux-policy-targeted-38.1.28-1 release.</changelog>
  <changelog author="Felix Kolwa &lt;fkolwa@redhat.com&gt; - 1.35.0-6" date="1704715200">- Bump revision number to 6.</changelog>
  <changelog author="Felix Kolwa &lt;fkolwa@redhat.com&gt; - 1.35.1-7" date="1705665600">- Bump revision number to 7.
- Pull in changes from Major Hayden:
  - Skip version check test
    Opened upstream bug:
        https://github.com/aws/efs-utils/issues/194
  - Disable automatic version check</changelog>
</package>
<package pkgid="3875017695a9513ffe1612925cfa7e26527ea2367e4206efe724bea528d397da" name="efs-utils-selinux" arch="noarch">
  <version epoch="0" ver="1.35.1" rel="7.el9"/>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 1.31.38-1" date="1693915200">- Initial package for version 1.31.38</changelog>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 1.35.0-2" date="1696939200">- Add patch for ignoring the fsap option.</changelog>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 1.35.0-3" date="1700049600">- Added deprecation warning patch.
- Added SELinux policies. (RHEL-14154)</changelog>
  <changelog author="fkolwa &lt;fkolwa@redhat.com&gt; - 1.35.0-4" date="1700222400">- Refactor watchdog service name</changelog>
  <changelog author="Felix Kolwa &lt;fkolwa@redhat.com&gt; - 1.35.0-5" date="1701950400">- Bump release to 5 to include selinux-policy-targeted-38.1.28-1 release.</changelog>
  <changelog author="Felix Kolwa &lt;fkolwa@redhat.com&gt; - 1.35.0-6" date="1704715200">- Bump revision number to 6.</changelog>
  <changelog author="Felix Kolwa &lt;fkolwa@redhat.com&gt; - 1.35.1-7" date="1705665600">- Bump revision number to 7.
- Pull in changes from Major Hayden:
  - Skip version check test
    Opened upstream bug:
        https://github.com/aws/efs-utils/issues/194
  - Disable automatic version check</changelog>
</package>
<package pkgid="c1bcaa7b457f83226809f7d35d7f266a474bc571c55c459a58df0b83291cdcbb" name="eigen3-doc" arch="noarch">
  <version epoch="0" ver="3.4.0" rel="2.el9"/>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 3.3.9-6" date="1625054400">- Added missing Minpack license
  Dropped unnecessary dependencies
  Resolves: #1967481</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 3.3.9-7" date="1626091200">- Remove glew-devel BR
  Resolves: #1981397</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.9-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 3.4.0-1" date="1645012800">- Update to 3.4.0
  Resolves: #2032423</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 3.4.0-2" date="1684152000">- Backport upstream patches
  Resolves: #2137486</changelog>
</package>
<package pkgid="b6e5b8c2a70267d699d28749168d8d70f57f1ce0730e51dff0c3fb46be5ad5c2" name="elinks" arch="aarch64">
  <version epoch="0" ver="0.12" rel="0.68.pre6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12-0.62.pre6" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12-0.63.pre6" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.12-0.64.pre6" date="1596196800">- make the code build with lua-5.4.x</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12-0.65.pre6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12-0.66.pre6" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12-0.67.pre6" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12-0.68.pre6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="78a0a3f4e6ff5b2bf0a2dcf34c8b9570f88ee889ef592d92a8b3b54b9ad7892b" name="emacs-anthy-unicode" arch="noarch">
  <version epoch="0" ver="1.0.0.20201109" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0.20191015-5" date="1596196800">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; 1.0.0.20201109-1" date="1604923200">- Bump 1.0.0.20201109</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0.20201109-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0.20201109-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; 1.0.0.20201109-4" date="1619870400">- Enable CI. Related: rhbz#1956212</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; 1.0.0.20201109-5" date="1620043200">- Delete unnecessary xemacs in tests/tests.yml. Related: rhbz#1956212</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; 1.0.0.20201109-6" date="1626177600">- Fix covscan report. Related: rhbz#1963073</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0.20201109-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; 1.0.0.20201109-8" date="1651233600">- Rebuild to add anthy-unicode-devel to CRB. Related: rhbz#2068287</changelog>
  <changelog author="Takao Fujiwara &lt;fujiwara@redhat.com&gt; 1.0.0.20201109-9" date="1651838400">- Fix covscan report. Related: rhbz#2068287</changelog>
</package>
<package pkgid="f1877fd835290d89b1c3677478a6eb283e648ec40dea9c3917a1d3cbbf6ad0ff" name="emacs-auctex-doc" arch="noarch">
  <version epoch="0" ver="12.3" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.1-8" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.1-9" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 12.1-10" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 12.3-1" date="1628251200">- Fix build failure on CentOS Stream. Related: rhbz#1951306
- Revert patch for FSF addresses (it became obsolete with 12.2)
- Remove Obsoletes and Provides tetex-preview</changelog>
</package>
<package pkgid="908091b2cb502533f104a55404fef794b9d3375f68f6911fcaef3769e4d281d5" name="emacs-devel" arch="aarch64">
  <version epoch="1" ver="27.2" rel="18.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-10" date="1710504000">- Disable xwidgets (RHEL-14551)
- org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
- Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
- Add protection for LaTeX preview (CVE-2024-30204)
- org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-11" date="1739966400">- Fix man.el shell injection vulnerability (RHEL-79025)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-12" date="1740398400">- Eliminate use of obsolete patch syntax (RHEL-80443)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-13" date="1740398401">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-14" date="1745841600">- Fix arbitrary code execution via Lisp macro expansion (RHEL-69399)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-15" date="1746792000">- Fix arbitrary code execution via Lisp macro expansion (RHEL-90181)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-16" date="1746792001">- Restore definition of variable "enable-dir-local-variables" (RHEL-92550)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-17" date="1750248000">- Pong and Tetris are excluded (RHEL-94297)
- Fix flymake tests with GCC 14 (RHEL-94297)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-18" date="1750680000">- Fix nsm-should-check for "google.com" failure (RHEL-94297)
- Fix package tests for tetris no longer existing as a package (RHEL-94297)
- Introduce untrusted-content variable (RHEL-94297)</changelog>
</package>
<package pkgid="5321d8dab59584b869ad0b1503ed50d7ad99713b1195e31a27cbc7f8419fffb2" name="emacs-gettext" arch="noarch">
  <version epoch="0" ver="0.21" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Sundeep Anand &lt;suanand@redhat.com&gt; - 0.21-6" date="1621252800">- Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
  Add gettext-0.21-disable-libtextstyle.patch
  Do not build libtextstyle, as it depends on libcroco
  which is now unmaintained and has known security bugs.
  Obsolete libtextstyle and libtextstyle-devel packages.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.21-8" date="1680177600">- add Java 17 support patch from Mamoru Tasaka (rhbz#2182696)</changelog>
</package>
<package pkgid="ca2f596cea39378aaeb4fb34d64260a4a61cf7609c7955d8fb6db461b9c8ab24" name="emacs-terminal" arch="noarch">
  <version epoch="1" ver="27.2" rel="18.el9"/>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-10" date="1710504000">- Disable xwidgets (RHEL-14551)
- org-file-contents: Consider all remote files unsafe (CVE-2024-30205)
- Make Gnus treats inline MIME contents as untrusted (CVE-2024-30203)
- Add protection for LaTeX preview (CVE-2024-30204)
- org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code (CVE-2024-39331)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-11" date="1739966400">- Fix man.el shell injection vulnerability (RHEL-79025)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-12" date="1740398400">- Eliminate use of obsolete patch syntax (RHEL-80443)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-13" date="1740398401">- Bump release</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-14" date="1745841600">- Fix arbitrary code execution via Lisp macro expansion (RHEL-69399)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-15" date="1746792000">- Fix arbitrary code execution via Lisp macro expansion (RHEL-90181)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-16" date="1746792001">- Restore definition of variable "enable-dir-local-variables" (RHEL-92550)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-17" date="1750248000">- Pong and Tetris are excluded (RHEL-94297)
- Fix flymake tests with GCC 14 (RHEL-94297)</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 1:27.2-18" date="1750680000">- Fix nsm-should-check for "google.com" failure (RHEL-94297)
- Fix package tests for tetris no longer existing as a package (RHEL-94297)
- Introduce untrusted-content variable (RHEL-94297)</changelog>
</package>
<package pkgid="ca07b873df42c8aabd12ed637b860030b7360fc5c96a234b49bde7586b4e57c2" name="emoji-picker" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el9"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.10.4-1" date="1612267200">- Update to 2.10.4
- Use “from unittest import mock” instead of just “import mock”.
- Update emoji annotations from CLDR
- Translation update from Weblate for zh_CN (still 100% complete)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.10.4-2" date="1613563200">- Use “BuildRequires:  appstream” only on Fedora</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.10.5-1" date="1613563201">- Update to 2.10.5
- Run the voikko tests only for libvoikko version &gt;= 4.3
- Adapt voikko test cases to the newest voikko version
  libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
- Log a warning when language is “fi” and “import libvoikko” failed
- Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
- Update emoji annotations from CLDR, switching “no” and “nb”
  See: https://unicode-org.atlassian.net/browse/CLDR-2698
- Remove icon in emoji-picker.appdata.xml (to avoid warnings
  from appstream-util and appstreamcli).</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.10.5-2" date="1613736000">- Use the voikko build requires only for Fedora. They are only
  needed to run the voikko test cases during build.</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.10.5-3" date="1613995200">- Remove gnome-desktop-testing and ibus-desktop-testing from the requires
  of the ibus-typing-booster-tests subpackage</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.11.0-1" date="1615464000">- Update to 2.11.0
- Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
- Don’t let dialog action area of setup tool expand.
- Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
- Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
- Elide extremely long candidates in the lookup table in the middle.
- If a candidate contains newlines, replace the newlines with arrows in the lookup table.
- If a commit string contains new-lines, commit it in several chunks
  and forward Return between the chunks.
- Update emoji annotations from CLDR
- Put the remote icon back in emoji-picker.appdata.xml, it was a
  false positive by appstreamcli
- Translation update from Weblate (pt_PT updated, 100% complete now)
- Skip the inscript2 test cases if these transliterations are not available.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.11.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.11.0-3" date="1625054400">- Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
- Improve CI tests and add gating.yaml</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.11.0-4" date="1627387200">- Related: rhbz#1974636 Fix license tag</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.11.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a3327ea71f286db6e17a8dc2eb0c460540545b2f53a1c71c7d60e11217677c57" name="enchant-aspell" arch="aarch64">
  <version epoch="1" ver="1.6.0" rel="30.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-25" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-26" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-27" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-28" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1:1.6.0-29" date="1621252800">- Resolves: #1961175 (Missing man page for enchant-lsmod)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="03b768742366ef81305c324e568fa2fae59c7f72b6010f2f6498c9ffbe5287de" name="enchant-voikko" arch="aarch64">
  <version epoch="1" ver="1.6.0" rel="30.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-25" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-26" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.0-27" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-28" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1:1.6.0-29" date="1621252800">- Resolves: #1961175 (Missing man page for enchant-lsmod)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.6.0-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="51fb16cce657e789bbb2ad9dd280f7f6ac4d598e238d10baa7b2711a881d7e32" name="enchant2-aspell" arch="aarch64">
  <version epoch="0" ver="2.2.15" rel="6.el9"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.11-1" date="1599566400">- Update to 2.2.11</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.12-1" date="1602936000">- Update to 2.2.12</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.13-1" date="1604404800">- Update to 2.2.13</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.14-1" date="1607947200">- Update to 2.2.14</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.15-1" date="1608724800">- Update to 2.2.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.15-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Peter Oliver &lt;rpm@mavit.org.uk&gt; - 2.2.15-3" date="1612267200">- Include support for Nuspell.</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.2.15-4" date="1612785600">- Disable nuspell support for RHEL (#1925839)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.2.15-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.2.15-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5e58ffefad1bb5f7e875ffc4f69a350148f354a993b1f5b14f9b61dd538f839d" name="enchant2-voikko" arch="aarch64">
  <version epoch="0" ver="2.2.15" rel="6.el9"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.11-1" date="1599566400">- Update to 2.2.11</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.12-1" date="1602936000">- Update to 2.2.12</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.13-1" date="1604404800">- Update to 2.2.13</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.14-1" date="1607947200">- Update to 2.2.14</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.2.15-1" date="1608724800">- Update to 2.2.15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.15-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Peter Oliver &lt;rpm@mavit.org.uk&gt; - 2.2.15-3" date="1612267200">- Include support for Nuspell.</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.2.15-4" date="1612785600">- Disable nuspell support for RHEL (#1925839)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.2.15-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.2.15-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="76b985b9fa49a83708eeee0f3d11a1272a99982050f4a7eecff855de98387da4" name="eog-devel" arch="aarch64">
  <version epoch="0" ver="40.3" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.38.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40~beta-1" date="1613649600">- Update to 40.beta</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40~beta-2" date="1613736000">- Disable installed tests on RHEL</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40~rc-1" date="1615809600">- Update to 40.rc</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40.0-1" date="1616414400">- Update to 40.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 40.0-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40.1-1" date="1620216000">- Update to 40.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 40.1-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40.3-1" date="1629028800">- Update to 40.3</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 40.3-2" date="1630065600">- Add 'Provides: bundled(libjpeg)'
Resolves: #1998486</changelog>
</package>
<package pkgid="3fdd49d5c9a446266da2595ad014630e7382e25a5e7d2a75b1e748aaf4f41e7d" name="epel-next-release" arch="noarch">
  <version epoch="0" ver="9" rel="9.el9"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9-5" date="1681473600">- Tweak crb script, check os-release for RHEL (#2186721)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 9-6" date="1692100800">- Add EPEL OpenH264 repository (#2053295)</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 9-7" date="1692273600">- Fix typo to actually enable EPEL OpenH264 repo</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 9-8" date="1725019200">- Tweak crb script. Fix for RHEL rhui repos (#2308671)</changelog>
  <changelog author="Carl George &lt;carlwgeorge@fedoraproject.org&gt; - 9-9" date="1732795200">- Remove the use of $releasever rhbz#2219796</changelog>
</package>
<package pkgid="08df71370f16138399c474f679d3263b41265264bc1d2504ea87cf505ad1b63f" name="espeak-ng-doc" arch="noarch">
  <version epoch="0" ver="1.50" rel="9.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.50-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.50-8" date="1687262400">- Rebuild for rhbz#2190221
- Resolves: rhbz#2190221</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.50-9" date="1687262401">- Fix gating.yaml
- Related: rhbz#2190221</changelog>
</package>
<package pkgid="279090d89ddc9e4e5c1d82db34ffce390bc75cec9345e88dc5cccf6587e68662" name="espeak-ng-vim" arch="noarch">
  <version epoch="0" ver="1.50" rel="9.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.50-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.50-8" date="1687262400">- Rebuild for rhbz#2190221
- Resolves: rhbz#2190221</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.50-9" date="1687262401">- Fix gating.yaml
- Related: rhbz#2190221</changelog>
</package>
<package pkgid="9e1311de521d690f0b00b1f911f7a265c776af69bd36fa71f5091e9b3b10eb7f" name="evince-devel" arch="aarch64">
  <version epoch="0" ver="40.5" rel="4.el9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
</package>
<package pkgid="2bb05ec290e289e4bf6736356991991a3ac5849c8d2a34e32ed495479466dba6" name="evince-devel" arch="aarch64">
  <version epoch="0" ver="40.5" rel="4.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4.el9_8.1" date="1781611200">- Sanitize arguments (CVE-2026-46529)
- Resolves: RHEL-184047</changelog>
</package>
<package pkgid="7725ff9dad153b0da22060966b5d6e0346db0cb040d7378ab72c640cff438c66" name="evince-dvi" arch="aarch64">
  <version epoch="0" ver="40.5" rel="4.el9"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
</package>
<package pkgid="30c898cd3473f74cd6b4c56535de9484c13f31ef75489e5e9569cc13a4adefc3" name="evince-dvi" arch="aarch64">
  <version epoch="0" ver="40.5" rel="4.el9_8.1"/>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-3" date="1747742400">- Allow launch action to open PDFs
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4" date="1748606400">- Fix a leak
- Resolves: RHEL-84038</changelog>
  <changelog author="Marek Kasik &lt;mkasik@redhat.com&gt; - 40.5-4.el9_8.1" date="1781611200">- Sanitize arguments (CVE-2026-46529)
- Resolves: RHEL-184047</changelog>
</package>
<package pkgid="598f2c86cca1e12f843edb8fa56d4421d0814680db060b01b74fef2a1b269566" name="evolution-devel-docs" arch="noarch">
  <version epoch="0" ver="3.40.4" rel="12.el9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.40.4-11" date="1728993600">- Resolves: RHEL-62668 (WebKitGTK 2.46.1: Middle mouse button inserts primary clipboard twice)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.40.4-12" date="1756728000">- Resolves: RHEL-111953 (WebKitGTK 2.49.4: JavaScript evaluation result serialization changes)</changelog>
</package>
<package pkgid="41b8bb1456037419edb11400df2049823d4ec626381ede08242ce54978a03d2b" name="expat-static" arch="aarch64">
  <version epoch="0" ver="2.5.0" rel="6.el9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-2" date="1707825600">- Fix parsing of large tokens
- Reject direct parameter entity recursion
- Resolves: RHEL-29699
- Resolves: RHEL-29696</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
</package>
<package pkgid="ca68ad5b0317aea6ec1143bc6080f9357395325bbc21a318a10f1ae920823b57" name="expat-static" arch="aarch64">
  <version epoch="0" ver="2.5.0" rel="6.el9_8.1"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-3" date="1728475200">- Fix CVE-2024-45490, CVE-2024-45491, CVE-2024-45492
- Resolves: RHEL-56761
- Resolves: RHEL-57520
- Resolves: RHEL-57511</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-4" date="1730980800">- Fix CVE-2024-50602
- Resolves: RHEL-65066</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-5" date="1743422400">- Fix CVE-2024-8176
- Resolves: RHEL-57489</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.5.0-6" date="1764676800">- Fix CVE-2025-59375
- Resolves: RHEL-114643</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.5.0-6.1" date="1779883200">- Fix CVE-2026-45186
- Resolves: RHEL-177988</changelog>
</package>
<package pkgid="29c949a54842dd2f4628edae8afc643348aced77cdd8d0059b92380acdf429f3" name="expectk" arch="aarch64">
  <version epoch="0" ver="5.45.4" rel="16.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 5.45.4-16" date="1707134400">- Rebuilt for -devel add to CRB
  Resolves: RHEL-18979</changelog>
</package>
<package pkgid="e4e49cbc07ddd0600a64f3dfc332e6894513678c086725b7235bf814da373bd0" name="extra-enforcer-rules" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.5.1-1" date="1651492800">- Initial release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.5.1-2" date="1651752000">- Implement bootstrap mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="0298d4988b67044f8adab194fd6b3d87042a4d0d57e2a27a040bcb39e311a787" name="extra-enforcer-rules" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-1" date="1692273600">- Update to upstream version 1.7.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.8.0-1" date="1710158400">- Update to upstream version 1.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.0-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="df7e6c763d4fce394f5e624d55715d4bbd96fe82cdb8dd6d7d41081372a59e49" name="extra-enforcer-rules-javadoc" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.5.1-1" date="1651492800">- Initial release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.5.1-2" date="1651752000">- Implement bootstrap mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a9d7b24d7e74031be352a0c896053f97090dcee1668625e4a335954b57e17e3c" name="extra-enforcer-rules-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-1" date="1692273600">- Update to upstream version 1.7.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-3" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.8.0-1" date="1710158400">- Update to upstream version 1.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.0-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b9877d88236bfe7a9559a4227862efc27a8e5eac3542070837aace59ebd52c26" name="fasterxml-oss-parent" arch="noarch">
  <version epoch="0" ver="69" rel="1.el9"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 56-1" date="1701777600">- Rebase to version 56</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 69-1" date="1752148800">- Rebase to version 69
- Resolves: RHEL-100266</changelog>
</package>
<package pkgid="0d513df9584e3855b8b4aff6cbb25278c4464bf8500ef2766986bd46f3058373" name="fasterxml-oss-parent" arch="noarch">
  <version epoch="0" ver="75" rel="1.el9_8"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 69-1" date="1752148800">- Rebase to version 69
- Resolves: RHEL-100266</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 75-1" date="1783080000">- Rebase to version 75
- Resolves: RHEL-188300</changelog>
</package>
<package pkgid="b1e49b87a3e103f75a48801227dd96bacb0ca1ee0beb1031f74cbd7d43658ff7" name="felix-parent" arch="noarch">
  <version epoch="0" ver="7" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7-1" date="1596024000">- Update to upstream version 7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7-6" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="9896341a9a123151d27ad382f6df1458f3c69b1aa2cdcb9f6a5a19bdf49f00e0" name="felix-parent" arch="noarch">
  <version epoch="0" ver="9" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7-11" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7-12" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 8-1" date="1702036800">- Update to upstream version 8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 9-1" date="1718712000">- Update to upstream version 9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9-2" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="8f80808b8979f3d987276e193dae486812e6f8d7ff0e24b3c5d22a5014dfc4cd" name="felix-utils" arch="noarch">
  <version epoch="0" ver="1.11.8" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.4-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.6-1" date="1611144000">- Update to upstream version 1.11.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.11.6-1" date="1612267200">- Update to version 1.11.6.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.6-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.6-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.6-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.11.6-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.8-1" date="1652356800">- Update to upstream version 1.11.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="0127d62fc2741831e55ad28900fa5641a28aaf9391a189dbb3257914045785d5" name="felix-utils" arch="noarch">
  <version epoch="0" ver="1.11.8" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.8-5" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.8-8" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.11.8-9" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-10" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.8-19" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1d64c0ee38397a4f585f76edb025515db5aa6193431f390277534aa03c50647a" name="felix-utils-javadoc" arch="noarch">
  <version epoch="0" ver="1.11.6" rel="5.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.11.4-1" date="1583150400">- Update to version 1.11.4.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.11.4-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.4-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.6-1" date="1611144000">- Update to upstream version 1.11.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.11.6-1" date="1612267200">- Update to version 1.11.6.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.6-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.6-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.6-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11.6-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="eb4147b90b584b03023bdb80bf80f2ffcc3840eb4ad96e2df9dd175631eb34d7" name="felix-utils-javadoc" arch="noarch">
  <version epoch="0" ver="1.11.8" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.4-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.6-1" date="1611144000">- Update to upstream version 1.11.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.11.6-1" date="1612267200">- Update to version 1.11.6.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.6-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.6-3" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.6-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.11.6-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.8-1" date="1652356800">- Update to upstream version 1.11.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="d81c42949f9c98c2915043d9e1bf261267f837843c030cde5244312fed5dd977" name="felix-utils-javadoc" arch="noarch">
  <version epoch="0" ver="1.11.8" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-4" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.8-5" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-6" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-7" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.8-8" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.11.8-9" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.8-10" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.8-19" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="05d2b9f00d283391b1d23a951d3f6daf619e5ac63de1d2cf82dbd99436c2190d" name="festival-devel" arch="aarch64">
  <version epoch="0" ver="2.5.0" rel="18.el9_6"/>
  <changelog author="Tomas Pelka - 2.5.0-18" date="1741694400">- Use systemd sysusers config to create user and group
  Resolves: RHEL-78736</changelog>
</package>
<package pkgid="77196bf9d0edf9ab7e15f2a8192fa64f27519aae1a970677f23d4527f333be5d" name="festvox-awb-arctic-hts" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="18.el9_6"/>
  <changelog author="Tomas Pelka - 2.5.0-18" date="1741694400">- Use systemd sysusers config to create user and group
  Resolves: RHEL-78736</changelog>
</package>
<package pkgid="65aedc50ee2d490bb31357a1e23f617c4222cb06a9f5b617fa15e71c66df36e6" name="festvox-bdl-arctic-hts" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="18.el9_6"/>
  <changelog author="Tomas Pelka - 2.5.0-18" date="1741694400">- Use systemd sysusers config to create user and group
  Resolves: RHEL-78736</changelog>
</package>
<package pkgid="6f5e2f9b58c409a174b6f36be82cf10f92f469e9dd6272952ec60727097e71c3" name="festvox-clb-arctic-hts" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="18.el9_6"/>
  <changelog author="Tomas Pelka - 2.5.0-18" date="1741694400">- Use systemd sysusers config to create user and group
  Resolves: RHEL-78736</changelog>
</package>
<package pkgid="44d53fdcfeb618468a0e3c51d195858cb7767d51adbc3ceb364197715f2a5898" name="festvox-jmk-arctic-hts" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="18.el9_6"/>
  <changelog author="Tomas Pelka - 2.5.0-18" date="1741694400">- Use systemd sysusers config to create user and group
  Resolves: RHEL-78736</changelog>
</package>
<package pkgid="aa0347d7870621bfa6af69656b98ac006cbac5a7b7032e3299b75c466458e5cd" name="festvox-kal-diphone" arch="noarch">
  <version epoch="0" ver="0.19990610" rel="18.el9_6"/>
  <changelog author="Tomas Pelka - 2.5.0-18" date="1741694400">- Use systemd sysusers config to create user and group
  Resolves: RHEL-78736</changelog>
</package>
<package pkgid="af8ac7fd4bd336c000d85ae4e51ae096f33d451918e98a955438a9f6bb0ce1e9" name="festvox-rab-diphone" arch="noarch">
  <version epoch="0" ver="0.19990610" rel="18.el9_6"/>
  <changelog author="Tomas Pelka - 2.5.0-18" date="1741694400">- Use systemd sysusers config to create user and group
  Resolves: RHEL-78736</changelog>
</package>
<package pkgid="a92d8239b6740b45a022afab1a6abf83cd2166dee628efcadbbe7aa7b4f1dfd8" name="festvox-rms-arctic-hts" arch="noarch">
  <version epoch="0" ver="2.5.0" rel="18.el9_6"/>
  <changelog author="Tomas Pelka - 2.5.0-18" date="1741694400">- Use systemd sysusers config to create user and group
  Resolves: RHEL-78736</changelog>
</package>
<package pkgid="df564f2431d540a5f8d7207b37357441f9be920ee8ccbd470ea336535bec3e20" name="fftw-mpich-devel" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-7" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-8" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6df56680219535760151a00358a8437fabdce840ac26c9b8eba952a59ea79dc1" name="fftw-mpich-libs" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-7" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-8" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="64f6e9e51589afd737c38f5a6c1beafc143dd8b13dcf617495bd08381b4268cf" name="fftw-mpich-libs-double" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-7" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-8" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4e57c3eba13585ae7221da72041fb55d739bec0cda4fb5960bf9cba0be97e156" name="fftw-mpich-libs-long" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-7" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-8" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="829ad22478a08c514c87f7f14235953348baa743ae2a3b1a684e04674a905b12" name="fftw-mpich-libs-single" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-7" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-8" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="431f04c8e049ef00de66c7e01c4fdd928a4ac71b22fbc2f06e6b78fb7ae22f0c" name="fftw-mpich-static" arch="aarch64">
  <version epoch="0" ver="3.3.8" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-7" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-8" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.8-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.8-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cc9d1b86d4b164191602eca830e07c2366177c0eae3ddb800ad6378518a84d3b" name="file-static" arch="aarch64">
  <version epoch="0" ver="5.39" rel="17.el9"/>
  <changelog author="Vincent Mihalkovic &lt;vmihalko@redhat.com&gt; - 5.39-17" date="1771848000">- Fix TypeError: 'NoneType' object is not callable in magic.close()
  Resolves: RHEL-136523</changelog>
</package>
<package pkgid="b63db3bd62d10e0f981f2107366ea023ad5543e8ef4275f0e67f34cb3ec66717" name="filesystem-content" arch="aarch64">
  <version epoch="0" ver="3.16" rel="5.el9"/>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.16-3" date="1719316800">- Add ownership of /etc/default, /usr/share/X11/fonts,
  /usr/share/fish, /usr/share/zsh
- Improve directory creation to avoid 'Argument list too long' error
  Resolves: RHEL-35327
  Resolves: RHEL-1337
  Resolves: RHEL-1338</changelog>
  <changelog author="Martin Osvald &lt;mosvald@redhat.com&gt; - 3.16-4" date="1719316801">- Update fmf plans and gating</changelog>
  <changelog author="Franti&#x161;ek Hrdina &lt;fhrdina@redhat.com&gt; - 3.16-5" date="1719316802">- Fixing gating.yaml</changelog>
</package>
<package pkgid="23b211943a66de1ac9cb3dac20167e89b791e65203c45549f12305c65459d868" name="flashrom-devel" arch="aarch64">
  <version epoch="0" ver="1.2" rel="10.el9"/>
  <changelog author="mrnuke &lt;mr.nuke.me@gmail.com&gt; - 1.2-1" date="1581422400">- Update to flashrom 1.2 (Release was intended to fix #1799344)</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 1.2-2" date="1581940800">- Build the package using meson to get the libflashrom shared library support
  required by fwupd.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 1.2-4" date="1608638400">- Perform source file verification during %prep</changelog>
  <changelog author="Peter Lemenkov &lt;lemenkov@gmail.com&gt; - 1.2-5" date="1608984000">- Added jlink support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.2-7" date="1618228800">- Disable JLink support to remove one extra dep we are not going to support
- Resolves: rhbz#1948597</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.2-9" date="1621252800">- Disable FTDI support to remove one extra dep we are not going to support
- Resolves: rhbz#1961170</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a8422b88c4c4db4f71c4c7b6d6eb651753c29f728983b23106d88944aec002da" name="flatpak-tests" arch="aarch64">
  <version epoch="0" ver="1.12.9" rel="4.el9_6"/>
</package>
<package pkgid="6cc8cd81ce53bd8d493f4707c3eef665c68007082af573ee78a2e826b1fd11d9" name="flatpak-tests" arch="aarch64">
  <version epoch="0" ver="1.12.9" rel="4.el9_8.1"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-2" date="1725278400">- Backport upstream patches for CVE-2024-42472
- Require bubblewrap version that has new --bind-fd option backported for
  addressing CVE-2024-42472</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.12.9-3" date="1725451200">- Fix previous changelog entry</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.12.9-4" date="1741348800">- Use sysusers_create_compat macro to create user &amp; group
Resolves: RHEL-82605</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.12.9-4.1" date="1779278400">- Fix arbitrary code execution via crafted symlinks in sandbox-expose options
  Resolves: RHEL-165643
- Fix arbitrary file deletion on host via improper cache file path validation
  Resolves: RHEL-170171</changelog>
</package>
<package pkgid="67b0e0d43c76dec882c79dda9f90a720116b2b6e35d173e42d65f670d91d8e33" name="flatpak-xdg-utils-tests" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.4-1" date="1612267200">- Update to 1.0.4</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.4-2" date="1612526400">- Add explicit conflicts with xdg-utils</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.4-3" date="1612526401">- Add flatpak- prefix to executables to avoid conflicting with xdg-utils</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.4-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.0.5-1" date="1648209600">- Update to 1.0.5
- Enable installed tests
Resolves: #2062206</changelog>
</package>
<package pkgid="ab9b7ff6cb494fe1e1b7bb6ec3510976dc30fbc1f8beab9e778acbc1956cf012" name="flexiblas-atlas" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="c30317eb6b9f86042d252d6cde271d6d383dd182595aa194eec95a91e0f22f9d" name="flexiblas-blis-openmp" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="db5a2e433ce1c329adbe71181c365b7caeda121a2e23df576cf54eaac0d651ff" name="flexiblas-blis-openmp64" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="2074cf61aea3d7715b43c239fcc09e053867befbeabccbf2dae23e2fd53bda57" name="flexiblas-blis-serial" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="3226ea1d8731d6057c62187d4625ffc670f3cfa89945bf67e0cf9ee248c80a39" name="flexiblas-blis-serial64" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="e8e62cef5af40bf7f471f3a558ef826d94c44c2a404269909c30dd4d47347e57" name="flexiblas-blis-threads" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="795bbc60c2a9105331f7023faa1513efe1420d4a26ebb72dab5561fe65ef0119" name="flexiblas-blis-threads64" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="eefd940ff18b78b3ba73a059b3b59fc4bb9c27065e6a7801035c2e68e9eab7e8" name="flexiblas-hook-profile" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="77d00b04e7f5eecab232302ad37f3daabb50926d9d3e931ae6632fbef453e5e2" name="flexiblas-hook-profile64" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="b31b8ab6e617060cce2b44e977faa29f15adce21a3c0bce013c819e7e123405f" name="flexiblas-openblas-serial64" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="634114546b36aed61c4d0af6551b97fe110e038a0acff6ef147a630495fc22b9" name="flexiblas-openblas-threads" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="f35f620d29611a55ab68e6b6942a44d3c76674904052593e8468e763ab218223" name="flexiblas-openblas-threads64" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="9.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt;- 3.0.4-9" date="1770379200">- backport the following fixes from Fedora:
  - fix header conflicts in multilib installs (RHEL-134741)
  - fix rpmlint warnings</changelog>
</package>
<package pkgid="b89ffbe59343c63502b8c28cefc6feed5ae1bdc5579a8ed61f368eb8e95dd141" name="fltk-fluid" arch="aarch64">
  <version epoch="0" ver="1.3.8" rel="1.el9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.5-9" date="1611230400">- Remove BuildRequires xprop entirely. If present, the configure script will call
  it looking for a property on the root window that Fedora's X server does not
  set, and which would not work anyway since there is no X server running in the
  buildroot, so we can just remove the dependency.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.5-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.6-1" date="1624968000">- 1.3.6
  Resolves: bz#1976712</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.6-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.8-1" date="1639742400">- 1.3.8
  Resolves: bz#2025415</changelog>
</package>
<package pkgid="58b45305f96a1de43a83932f4cd4f7316c9996e2d0b65b69bc7b17d61ddd978f" name="fltk-static" arch="aarch64">
  <version epoch="0" ver="1.3.8" rel="1.el9"/>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 1.3.5-9" date="1611230400">- Remove BuildRequires xprop entirely. If present, the configure script will call
  it looking for a property on the root window that Fedora's X server does not
  set, and which would not work anyway since there is no X server running in the
  buildroot, so we can just remove the dependency.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.5-11" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.6-1" date="1624968000">- 1.3.6
  Resolves: bz#1976712</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.6-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.3.8-1" date="1639742400">- 1.3.8
  Resolves: bz#2025415</changelog>
</package>
<package pkgid="322a0882085335e7729dd3efa679153be2556b45a7fc145e8a0c5282131e896c" name="flute" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="27.OOo31.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-22.OOo31" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-23.OOo31" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-24.OOo31" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-25.OOo31" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.0-26.OOo31" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.0-27.OOo31" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e0c9f2e9b96d835747e8a6807837ec5909bb1d288fe824f2c8a5b8673fcf1651" name="flute-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="27.OOo31.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-22.OOo31" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-23.OOo31" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-24.OOo31" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-25.OOo31" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.0-26.OOo31" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.0-27.OOo31" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f9ccff23816e66843c5e6141995a8ff8101a7a6be0c842053582d7b2c014687c" name="fontforge-devel" arch="aarch64">
  <version epoch="0" ver="20201107" rel="8.el9_8"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20201107-6" date="1712059200">- Resolves: RHEL-26716 - CVE-2024-25081 and CVE-2024-25082 fontforge: various flaws</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20201107-7" date="1769515200">- Resolves: RHEL-138206
  CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138228
  CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138158
  CVE-2025-15269 SFD File Parsing Use-After-Free</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20201107-8" date="1774353600">- Resolves: RHEL-138222
  CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability</changelog>
</package>
<package pkgid="bf7d83061e6af804b7010004d72a674cc3ceedb7f8fb6ef039f4d03597f3917d" name="fontforge-doc" arch="noarch">
  <version epoch="0" ver="20201107" rel="8.el9_8"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20201107-6" date="1712059200">- Resolves: RHEL-26716 - CVE-2024-25081 and CVE-2024-25082 fontforge: various flaws</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20201107-7" date="1769515200">- Resolves: RHEL-138206
  CVE-2025-15279 GUtils BMP File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138228
  CVE-2025-15275 SFD File Parsing Heap-based Buffer Overflow
- Resolves: RHEL-138158
  CVE-2025-15269 SFD File Parsing Use-After-Free</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20201107-8" date="1774353600">- Resolves: RHEL-138222
  CVE-2025-15270 SFD File Parsing Remote Code Execution Vulnerability</changelog>
</package>
<package pkgid="ea307adcde0cd8e82cc9957f74e0b253b907e9753e116a63fe95d590e9119203" name="fonttools" arch="noarch">
  <version epoch="0" ver="4.19.1" rel="3.el9"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.17.0-1" date="1605269619">- Update to 4.17.0 version (#1897467)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.17.1-1" date="1605948537">- Update to 4.17.1 version (#1898343)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.0-1" date="1607159603">- Update to 4.18.0 version (#1904631)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.1-1" date="1607712471">- Update to 4.18.1 version (#1906095)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.2-1" date="1608298623">- Update to 4.18.2 version (#1908485)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.18.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.19.0-1" date="1611741736">- Update to 4.19.0 version (#1920265)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.19.1-1" date="1612276369">- Update to 4.19.1 version (#1921968)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.19.1-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.19.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="bc83b78905f7b235660e2b8826aeec249adc85b33a79fd28409327c543278114" name="fprintd-devel" arch="noarch">
  <version epoch="0" ver="1.94.0" rel="3.el9"/>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.90.7-1" date="1607515200">- Update to 1.90.7 (#1902255)
  Resolves: #1905667
  Resolves: #1905964</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.90.8-1" date="1607688000">- Update to 1.90.8 (#1902255)
  This fixes PAM not working when fprintd was just started</changelog>
  <changelog author="Adam Williamson &lt;awilliam@redhat.com&gt; - 1.90.8-2" date="1608292800">- Rebuild for libnss dependency issue</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.90.9-1" date="1610541217">- Update to 1.90.9 (#1915788)
  Resolves: #1909669
  Resolves: #1909559</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.90.9-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.90.9-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.90.9-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.94.0-1" date="1629720000">- Update to 1.94.0
  Resolves: #1996636</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.94.0-2" date="1629892800">- Pull in build/test fixes from upstream
  Related: #1996636</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.94.0-3" date="1629979200">- Use GFDL abbreviation as GFDLv1.1+ is not listed
- Install PAM module into /usr
- Pull in further test fixes</changelog>
</package>
<package pkgid="afee8cd988789720d14513cd3d20ebaa7c025939922e1d12bb91ce27c958f069" name="freetype-demos" arch="aarch64">
  <version epoch="0" ver="2.10.4" rel="10.el9_5"/>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 2.10.4-10" date="1742558400">- Fix for CVE-2025-27363 out-of-bound write vulnerability
- Patch initially by Marc Deslauriers of Canonical
- https://www.openwall.com/lists/oss-security/2025/03/14/3
- Adjusted for EL9 by Jonathan Wright of AlmaLinux
- and a member of the Meta security team
- Resolves: RHEL-83105</changelog>
</package>
<package pkgid="22aa1dbb9162b7653de8d99849571fe055c4e85c48fc1742c0552251700c789f" name="fstrm-doc" arch="noarch">
  <version epoch="0" ver="0.6.1" rel="3.el9"/>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 0.6.1-1" date="1617883200">- Update to 0.6.1 (#1946415)</changelog>
  <changelog author="Petr Men&#x161;&#xED;k &lt;pemensik@redhat.com&gt; - 0.6.1-2" date="1617969600">- Apply coverity fixes also to bundled libmy</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="52d36a9020932ed7177bcdb430fde1a0584eabfbd7118ecc55c703865c2a0390" name="fusesource-pom" arch="noarch">
  <version epoch="0" ver="1.12" rel="10.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12-2" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.12-3" date="1593172800">- Allow dependent packages to build on Java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.12-4" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12-8" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12-9" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.12-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="254fea86a9979af411f2f33c011c2867c0c144255a0998ab3937afa9adf5cf4d" name="fusesource-pom" arch="noarch">
  <version epoch="0" ver="1.12" rel="11.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-8" date="1626868800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-9" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.12-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-11" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="9348ab430d454cb5f71d27dec615b4f6d119461eaaac3228eb9b7d7f7736f763" name="fusesource-pom" arch="noarch">
  <version epoch="0" ver="1.12" rel="29.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-13" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-15" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.12-17" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.12-18" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12-19" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12-20" date="1724155200">- Use source tarball from GitHub repository</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12-29" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e1b261ecd06ae128e8b117bd14215aa17c66bba293c5335da7cd7225013ae428" name="fwupd-plugin-uefi-capsule-data" arch="aarch64">
  <version epoch="0" ver="2.0.19" rel="2.el9_8.alma.1"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.26-1" date="1728993600">- Rebase to get hardware support for CERTPX-13842
- Resolves: #RHEL-16637
- Resolves: #RHEL-35373
- Resolves: #RHEL-61930</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.29-1" date="1742299200">- Rebase to get new hardware support
- Resolves: #RHEL-82423</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.31-1" date="1752235200">- Rebase to get new hardware support
- Resolves: #RHEL-82423</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 2.0.19-1" date="1767960000">- Rebase to get new hardware support
- Resolves: #RHEL-125778</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.0.19-2.alma.1" date="1776081600">- Use AlmaLinux cert</changelog>
</package>
<package pkgid="e6236e3f3999153de40f9e813863d48add7bf4939dfcb4091d656ff969ea274b" name="fwupd-tests" arch="aarch64">
  <version epoch="0" ver="2.0.19" rel="2.el9_8.alma.1"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.26-1" date="1728993600">- Rebase to get hardware support for CERTPX-13842
- Resolves: #RHEL-16637
- Resolves: #RHEL-35373
- Resolves: #RHEL-61930</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.29-1" date="1742299200">- Rebase to get new hardware support
- Resolves: #RHEL-82423</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 1.9.31-1" date="1752235200">- Rebase to get new hardware support
- Resolves: #RHEL-82423</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 2.0.19-1" date="1767960000">- Rebase to get new hardware support
- Resolves: #RHEL-125778</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.0.19-2.alma.1" date="1776081600">- Use AlmaLinux cert</changelog>
</package>
<package pkgid="06fad83342e7b48db4c1d38f2efc69d4ae878bc68ee9f42823a5e997845fa163" name="gawk-devel" arch="aarch64">
  <version epoch="0" ver="5.1.0" rel="6.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.0.1-8" date="1582027200">- Split the package into the main package and locales subpackage</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.1.0-1" date="1595332800">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.0-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.1.0-6" date="1645012800">Fix the issue with incorect handling of return values of some processes
Resolves: rhbz#2055107</changelog>
</package>
<package pkgid="9056a0a2db5a4c9301f65367d60df281f05ffc832d9bf4e629071f942273b715" name="gawk-doc" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="6.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.0.1-8" date="1582027200">- Split the package into the main package and locales subpackage</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.1.0-1" date="1595332800">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-2" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.0-4" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 5.1.0-6" date="1645012800">Fix the issue with incorect handling of return values of some processes
Resolves: rhbz#2055107</changelog>
</package>
<package pkgid="91ed2724164d79b884e01abf40e2e5acbc82c953a4e2ddb6c499b3a0a9579361" name="gcab" arch="aarch64">
  <version epoch="0" ver="1.4" rel="6.el9"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.3-1" date="1570536000">- New upstream release</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 1.4-1" date="1578312000">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="dfc22b912990333a4afb00b2bf6073b062c4023cb49b51b9fcade911a91112c9" name="gcc-gdb-plugin" arch="aarch64">
  <version epoch="0" ver="11.5.0" rel="14.el9.alma.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 11.5.0-14.alma.1" date="1774872000">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d6676773eaf1217e3796efdd2d67438eaecfc4783daab8ddb1e39664a76540f2" name="gcc-toolset-12-annobin-plugin-clang" arch="aarch64">
  <version epoch="0" ver="11.08" rel="2.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 10.94-2" date="1670241600">- Rename gcc plugin to gts-annobin.  (#2111977)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 10.95-1" date="1670846400">- Annocheck: Use real filename rather than debuginfo filename.  (#2152280)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 10.97-1" date="1671192000">- Annocheck: Add test for binaries built by cross compilers.
- Annocheck: Improve heuristic used to detect binaries without code. (#2144533)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 10.98-1" date="1671451200">- GCC Plugin: Fix building with gcc-13.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 10.99-1" date="1671710400">- Annocheck: Improve handling of tool versions.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 11.02-1" date="1672920000">- Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
- Annocheck: Add more special glibc filenames.  (#2158100)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 11.05-1" date="1673524800">- Annocheck: Fix handling of empty files.  (#2159292)
- Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
- Annocheck: Fix memory leaks.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 11.06-1" date="1673611200">- Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
- Spec file: Enable annotated building.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 11.08-1" date="1675166400">- Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 11.08-2" date="1675339200">- Re-enable building with LTO.  (#2166579)</changelog>
</package>
<package pkgid="52acc739728581a4edc978676ce30e8453830b3a0b81c400ccebe7945538c8ca" name="gcc-toolset-12-annobin-plugin-llvm" arch="aarch64">
  <version epoch="0" ver="11.08" rel="2.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 10.94-2" date="1670241600">- Rename gcc plugin to gts-annobin.  (#2111977)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 10.95-1" date="1670846400">- Annocheck: Use real filename rather than debuginfo filename.  (#2152280)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 10.97-1" date="1671192000">- Annocheck: Add test for binaries built by cross compilers.
- Annocheck: Improve heuristic used to detect binaries without code. (#2144533)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 10.98-1" date="1671451200">- GCC Plugin: Fix building with gcc-13.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 10.99-1" date="1671710400">- Annocheck: Improve handling of tool versions.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 11.02-1" date="1672920000">- Annocheck: Do not assume that object files contain no code simply because they do not have an executable segment.  (#2158386)
- Annocheck: Add more special glibc filenames.  (#2158100)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 11.05-1" date="1673524800">- Annocheck: Fix handling of empty files.  (#2159292)
- Annocheck: Add crti.o and crtn.o to the list of known glibc special files.  (#2158740)
- Annocheck: Fix memory leaks.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 11.06-1" date="1673611200">- Annocheck: Fix handling of file built by multiple versions of gcc.  (#2160700)
- Spec file: Enable annotated building.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 11.08-1" date="1675166400">- Annocheck: Fix atexit test.  Fix recording of version numbers.  (#2165528)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 11.08-2" date="1675339200">- Re-enable building with LTO.  (#2166579)</changelog>
</package>
<package pkgid="d0192b4f4ae864a11fc483559c4737b2ca15fa58222a299c22b45aefa9878f5c" name="gcc-toolset-12-gdb-doc" arch="noarch">
  <version epoch="0" ver="11.2" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 11.1-11" date="1643630400">- Fix buld issues. (RHBZ 2042257, Keith Seitz, Andrew Burgess)
- Update libipt to 2.0.5.</changelog>
  <changelog author="Kevin Buettner &lt;kevinb@redhat.com&gt; - 11.1-12" date="1643630401">- Fix "sect_index_data not initialized" internal error. (RHBZ 2042664,
  Kevin Buettner).</changelog>
  <changelog author="Kevin Buettner - 11.2-1" date="1644408000">- Rebase to FSF GDB 11.2.</changelog>
  <changelog author="Kevin Buettner - 11.2-2" date="1644408001">- On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
  (This is a workaround for the bogus warning/error that we now see
  on i686 regarding a "may write a terminating nul past the end of
  the destination" message for the sprintf() call in
  global_symbol_searcher::search() in gdb/symtab.c.)</changelog>
  <changelog author="Kevin Buettner - 11.2-3" date="1648641600">- Backport upstream patch which removes sizes from debuginfod download
  messages when the size is not available (RHBZ 2068280, Aaron Merey).</changelog>
  <changelog author="Keith Seitz - 11.2-1.el9" date="1654776000">- Rebase GTS (RH BZ 2077494).</changelog>
  <changelog author="Keith Seitz - 11.2-2.el9" date="1655121600">- Rebuild w/SCL prefix.</changelog>
  <changelog author="Keith Seitz - 11.2-3.el9" date="1655812800">- NVR bump to include {gating,rpminspect}.yaml.</changelog>
  <changelog author="Keith Seitz - 11.2-4.el9" date="1656417600">- Do not build -minimal package for GTS.</changelog>
</package>
<package pkgid="1520e783c47e5ed800567c0f900bde1364e32a18a832490adfe7445075987edd" name="gcc-toolset-12-gdb-gdbserver" arch="aarch64">
  <version epoch="0" ver="11.2" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 11.1-11" date="1643630400">- Fix buld issues. (RHBZ 2042257, Keith Seitz, Andrew Burgess)
- Update libipt to 2.0.5.</changelog>
  <changelog author="Kevin Buettner &lt;kevinb@redhat.com&gt; - 11.1-12" date="1643630401">- Fix "sect_index_data not initialized" internal error. (RHBZ 2042664,
  Kevin Buettner).</changelog>
  <changelog author="Kevin Buettner - 11.2-1" date="1644408000">- Rebase to FSF GDB 11.2.</changelog>
  <changelog author="Kevin Buettner - 11.2-2" date="1644408001">- On ix86, add -Wno-format-overflow to --enable-gdb-build-warnings. 
  (This is a workaround for the bogus warning/error that we now see
  on i686 regarding a "may write a terminating nul past the end of
  the destination" message for the sprintf() call in
  global_symbol_searcher::search() in gdb/symtab.c.)</changelog>
  <changelog author="Kevin Buettner - 11.2-3" date="1648641600">- Backport upstream patch which removes sizes from debuginfod download
  messages when the size is not available (RHBZ 2068280, Aaron Merey).</changelog>
  <changelog author="Keith Seitz - 11.2-1.el9" date="1654776000">- Rebase GTS (RH BZ 2077494).</changelog>
  <changelog author="Keith Seitz - 11.2-2.el9" date="1655121600">- Rebuild w/SCL prefix.</changelog>
  <changelog author="Keith Seitz - 11.2-3.el9" date="1655812800">- NVR bump to include {gating,rpminspect}.yaml.</changelog>
  <changelog author="Keith Seitz - 11.2-4.el9" date="1656417600">- Do not build -minimal package for GTS.</changelog>
</package>
<package pkgid="df29911ca7830ce4ad53ee2fe0efab4ff8c88710b8303d0868e00fdba691c91f" name="gcc-toolset-13-annobin-libannocheck" arch="aarch64">
  <version epoch="0" ver="12.92" rel="1.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.18-1" date="1688385600">- Annocheck: Remove dependency upon libiberty.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.20-1" date="1689595200">- Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
- GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.32-1" date="1701086400">- LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
- GCC Plugin: Add support for -fhardended.
- Update glibc detection heuristics for PPC64.  (RHEL-16453)
- Fix another atexit test failure.  (#2247481)
- Fix atexit test failure.
- Notes: Add support for string format notes.
- GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
- Annobin: Add future test of these options.
- GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
- Annobin: Add test for these warnings.
- GCC Plugin: Enable string note format by default.
- Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
- Annocheck: Add test for FIPS compliant GO binaries.
- Annocheck: Fix double free.  (#2226749)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.32-2" date="1701172800">- GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.52-1" date="1721649600">- Rebuild with LLVM 18.  (RHEL-49954)
- Rebase to 12.52 in order to bring in fixes for LLVM 18.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.65-1" date="1722340800">- Rebase to 12.65.  (RHEL-51018)
- Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
- GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
- Annocheck: Add improvements to the builtby utility.
- Annocheck: Add support for ADA binaries.
- Annocheck: Add support for binaries built from more than two high level source languages.
- Annocheck: Add support for object files containing no executable code.
- Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
- Annocheck: Add support for Fortran binaries.
- Annocheck: Add heuristic for detecting parts of the CGO runtime library.
- Annocheck: Add improvements for handling Clang runtime binaries.
- Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
- Annocheck: Add more glibc source file names.
- Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
- Annocheck: Remove some false positives for Rust binaries.  (#2280239)
- Annocheck: Defer passing the branch protection test until all notes have been checked.
- GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.65-3" date="1723204800">- Spec File: Use correct names for the symlinks.  (RHEL-53574)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.69-1" date="1723464000">- BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
- Spec File: Use correct names for the symlinks.  (RHEL-53574)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.70-1" date="1723550400">- Clang &amp; LLVM Plugins: Include install directory in binary.  (RHEL-54069)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.92-1" date="1739880000">- Rebase to bring in improvements for locating string notes.  (RHEL-79807)
- Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
- Annocheck: Fix resource leak.  (RHEL-79253)
- Annocheck: Fix double free. Add special handling for COMBOOT modules.
- Annocheck: Improve diagnostics when a separate debug info file cannot be found.
- Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
- Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
- Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
- Annocheck: Fix the --debug-dir option.
- Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
- Annocheck: Remove spurious debugging messages.
- Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
- Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
- Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
- GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
- Testsuite: Use configured compiler when running tests.
- GCC Plugin: Fix building with gcc 15.  (#32429)
- Annocheck: Fix overly long debug messages.
- Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
- Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
- Annocheck: Add --enable-future to enable future fail components in normal tests.
- Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
- Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Add --skip-passes option.
- Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
- Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
- GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.</changelog>
</package>
<package pkgid="9e56353518e6a2be88ad0fdff5c643c257764daa69190e3549dda8ad540a9660" name="gcc-toolset-13-annobin-plugin-clang" arch="aarch64">
  <version epoch="0" ver="12.92" rel="1.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.18-1" date="1688385600">- Annocheck: Remove dependency upon libiberty.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.20-1" date="1689595200">- Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
- GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.32-1" date="1701086400">- LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
- GCC Plugin: Add support for -fhardended.
- Update glibc detection heuristics for PPC64.  (RHEL-16453)
- Fix another atexit test failure.  (#2247481)
- Fix atexit test failure.
- Notes: Add support for string format notes.
- GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
- Annobin: Add future test of these options.
- GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
- Annobin: Add test for these warnings.
- GCC Plugin: Enable string note format by default.
- Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
- Annocheck: Add test for FIPS compliant GO binaries.
- Annocheck: Fix double free.  (#2226749)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.32-2" date="1701172800">- GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.52-1" date="1721649600">- Rebuild with LLVM 18.  (RHEL-49954)
- Rebase to 12.52 in order to bring in fixes for LLVM 18.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.65-1" date="1722340800">- Rebase to 12.65.  (RHEL-51018)
- Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
- GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
- Annocheck: Add improvements to the builtby utility.
- Annocheck: Add support for ADA binaries.
- Annocheck: Add support for binaries built from more than two high level source languages.
- Annocheck: Add support for object files containing no executable code.
- Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
- Annocheck: Add support for Fortran binaries.
- Annocheck: Add heuristic for detecting parts of the CGO runtime library.
- Annocheck: Add improvements for handling Clang runtime binaries.
- Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
- Annocheck: Add more glibc source file names.
- Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
- Annocheck: Remove some false positives for Rust binaries.  (#2280239)
- Annocheck: Defer passing the branch protection test until all notes have been checked.
- GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.65-3" date="1723204800">- Spec File: Use correct names for the symlinks.  (RHEL-53574)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.69-1" date="1723464000">- BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
- Spec File: Use correct names for the symlinks.  (RHEL-53574)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.70-1" date="1723550400">- Clang &amp; LLVM Plugins: Include install directory in binary.  (RHEL-54069)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.92-1" date="1739880000">- Rebase to bring in improvements for locating string notes.  (RHEL-79807)
- Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
- Annocheck: Fix resource leak.  (RHEL-79253)
- Annocheck: Fix double free. Add special handling for COMBOOT modules.
- Annocheck: Improve diagnostics when a separate debug info file cannot be found.
- Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
- Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
- Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
- Annocheck: Fix the --debug-dir option.
- Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
- Annocheck: Remove spurious debugging messages.
- Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
- Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
- Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
- GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
- Testsuite: Use configured compiler when running tests.
- GCC Plugin: Fix building with gcc 15.  (#32429)
- Annocheck: Fix overly long debug messages.
- Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
- Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
- Annocheck: Add --enable-future to enable future fail components in normal tests.
- Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
- Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Add --skip-passes option.
- Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
- Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
- GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.</changelog>
</package>
<package pkgid="1946367e3b39e2db68ee856d93d80c049803711a6e41e8d895ca898b9bde9e59" name="gcc-toolset-13-annobin-plugin-llvm" arch="aarch64">
  <version epoch="0" ver="12.92" rel="1.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.18-1" date="1688385600">- Annocheck: Remove dependency upon libiberty.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.20-1" date="1689595200">- Annocheck: Ignore AArch64 $x and $d symbols.  (#2221192)
- GCC Plugin: Suppress active checks for fortran sources.  Improve scanning of COLLECT_GCC_OPTIONS.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.32-1" date="1701086400">- LLVM Plugin: Fix building with LLVM version 17.  (RHEL-17311)
- GCC Plugin: Add support for -fhardended.
- Update glibc detection heuristics for PPC64.  (RHEL-16453)
- Fix another atexit test failure.  (#2247481)
- Fix atexit test failure.
- Notes: Add support for string format notes.
- GCC Plugin: Record settings of -Wstrict-flex-arrays and -fstrict-flex-arrays
- Annobin: Add future test of these options.
- GCC Plugin: Record settings of -Wimplicit-int and -Wimplicit-function-declaration.
- Annobin: Add test for these warnings.
- GCC Plugin: Enable string note format by default.
- Annocheck: Change GO FIPS test to look for CGO_ENABLED markers.
- Annocheck: Add test for FIPS compliant GO binaries.
- Annocheck: Fix double free.  (#2226749)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.32-2" date="1701172800">- GCC Plugin: Add %verify tokens to show that the default plugin names are symbolic links. (RHEL-17505)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.52-1" date="1721649600">- Rebuild with LLVM 18.  (RHEL-49954)
- Rebase to 12.52 in order to bring in fixes for LLVM 18.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.65-1" date="1722340800">- Rebase to 12.65.  (RHEL-51018)
- Annocheck: Fix recording arguments for later re-use.  (RHEL-50802)
- GCC Plugin: Fix building AArch64 components with gcc earlier than 11.3.
- Annocheck: Add improvements to the builtby utility.
- Annocheck: Add support for ADA binaries.
- Annocheck: Add support for binaries built from more than two high level source languages.
- Annocheck: Add support for object files containing no executable code.
- Annocheck: Do not FAIL LLVM compiled binaries that have not been built with sanitize-cfi and/or sanitize-safe-stack.
- Annocheck: Add support for Fortran binaries.
- Annocheck: Add heuristic for detecting parts of the CGO runtime library.
- Annocheck: Add improvements for handling Clang runtime binaries.
- Annocheck: Add tweaks for mixed Rust/C binaries.  (#2284605)
- Annocheck: Add more glibc source file names.
- Annocheck: Skip GAPS test for GO binaries.  (RHEL-36308)
- Annocheck: Remove some false positives for Rust binaries.  (#2280239)
- Annocheck: Defer passing the branch protection test until all notes have been checked.
- GCC Plugin: Add extra code for detecting the branch protection setting.  (RHEL-35958)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.65-3" date="1723204800">- Spec File: Use correct names for the symlinks.  (RHEL-53574)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.69-1" date="1723464000">- BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
- Spec File: Use correct names for the symlinks.  (RHEL-53574)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.70-1" date="1723550400">- Clang &amp; LLVM Plugins: Include install directory in binary.  (RHEL-54069)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.92-1" date="1739880000">- Rebase to bring in improvements for locating string notes.  (RHEL-79807)
- Annocheck: Do not rely upon libelf's ability to detect links to separate debuginfo files.  (RHEL-79264)
- Annocheck: Fix resource leak.  (RHEL-79253)
- Annocheck: Fix double free. Add special handling for COMBOOT modules.
- Annocheck: Improve diagnostics when a separate debug info file cannot be found.
- Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77328)
- Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
- Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
- Annocheck: Fix the --debug-dir option.
- Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
- Annocheck: Remove spurious debugging messages.
- Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
- Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
- Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
- GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
- Testsuite: Use configured compiler when running tests.
- GCC Plugin: Fix building with gcc 15.  (#32429)
- Annocheck: Fix overly long debug messages.
- Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
- Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
- Annocheck: Add --enable-future to enable future fail components in normal tests.
- Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
- Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Add --skip-passes option.
- Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
- Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
- GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.</changelog>
</package>
<package pkgid="053430dbe6e04dae46b329d5214e219b9f25794cafc5cce976fe7e0e47aa34fb" name="gcc-toolset-13-binutils-gprofng" arch="aarch64">
  <version epoch="0" ver="2.40" rel="22.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.40-16" date="1702382400">- Disable building static libraries with LTO.  (RHEL-18800)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.40-17" date="1704974400">- Spec File: Do not use of the system zlib by default.  (RHEL-19373)
- Spec File: Do not check the mtime of ld.bfd. (RHEL-21303)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.40-19" date="1707480000">- Spec File: Restore the SElinux context to %{_libdir}.  (RHEL-22818)
- [2.40-18: was a failed attempt to fix RHEL-22818]</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.40-20" date="1707825600">- Add support for AMD's znver5 architecture extension.  (RHEL-23798)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.40-21" date="1708603200">- Run x86_64 assembler tests for znver5 architecture extension.  (RHEL-23798)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 2.40-22" date="1764244800">- Fix a potential illegal memory access when linking a corrupt input file.  (RHEL-130655)</changelog>
</package>
<package pkgid="80edc13b2862ec73eada2f92016807deff3f202377b390873368891a16f1a173" name="gcc-toolset-13-gdb-doc" arch="noarch">
  <version epoch="0" ver="12.1" rel="5.el9"/>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 12.1-14" date="1674475200">From Sergey Mende:
- Backport upstream patch "gdb: call check_typedef at beginning of
  dwarf_expr_context::fetch_result". (Simon Marchi)</changelog>
  <changelog author="Kevin Buettner &lt;kevinb@redhat.com&gt;" date="1674475201">- More tweaks to gdb-6.6-buildid-locate-rpm.patch, in which rpmTag
  is replaced with rpmDbiTagVal.</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 12.1-15" date="1674561600">- NVR bump for failed build.</changelog>
  <changelog author="Bruno Larsen &lt;blarsen@redhat.com&gt;" date="1674734400">- Remove gdb-rhbz1398387-tab-crash-test.patch as that test didn't
  work anymore.</changelog>
  <changelog author="Kevin Buettner &lt;kevinb@redhat.com&gt; - 12.1-16" date="1674820800">- Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
  and $_gdb_minor will be obtained correctly.</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 12.1-1.el9" date="1681819200">- Initial import for GTS13.</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 12.1-2.el9" date="1682596800">- Backport binutls/29699 "Fix an illegal memory access when parsing..."
  (Nick Clifton, RHBZ 2153228)</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 12.1-3.el9" date="1686657600">- Backport "Update gdb-add-index.sh ..."
  (Andrew Burgess, RHBZ 2213228)</changelog>
  <changelog author="Guinevere Larsen &lt;blarsen@redhat.com&gt; - 12.1-4.el9" date="1696939200">- Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
  (Nick Clifton)
- Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
  (Nick Clifton, RHEL-4234)</changelog>
  <changelog author="Guinevere Larsen &lt;blarsen@redhat.com&gt; - 12.1-5.el9" date="1698667200">- Fix issue introduced when backporting the recursion limit to the rust demangler.</changelog>
</package>
<package pkgid="e78291dc26c3886cfac46d94065957685bc58403f571e58294221e14c5290671" name="gcc-toolset-13-gdb-gdbserver" arch="aarch64">
  <version epoch="0" ver="12.1" rel="5.el9"/>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 12.1-14" date="1674475200">From Sergey Mende:
- Backport upstream patch "gdb: call check_typedef at beginning of
  dwarf_expr_context::fetch_result". (Simon Marchi)</changelog>
  <changelog author="Kevin Buettner &lt;kevinb@redhat.com&gt;" date="1674475201">- More tweaks to gdb-6.6-buildid-locate-rpm.patch, in which rpmTag
  is replaced with rpmDbiTagVal.</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 12.1-15" date="1674561600">- NVR bump for failed build.</changelog>
  <changelog author="Bruno Larsen &lt;blarsen@redhat.com&gt;" date="1674734400">- Remove gdb-rhbz1398387-tab-crash-test.patch as that test didn't
  work anymore.</changelog>
  <changelog author="Kevin Buettner &lt;kevinb@redhat.com&gt; - 12.1-16" date="1674820800">- Tweak gdb-6.3-rh-testversion-20041202.patch so that $_gdb_major
  and $_gdb_minor will be obtained correctly.</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 12.1-1.el9" date="1681819200">- Initial import for GTS13.</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 12.1-2.el9" date="1682596800">- Backport binutls/29699 "Fix an illegal memory access when parsing..."
  (Nick Clifton, RHBZ 2153228)</changelog>
  <changelog author="Keith Seitz &lt;keiths@redhat.com&gt; - 12.1-3.el9" date="1686657600">- Backport "Update gdb-add-index.sh ..."
  (Andrew Burgess, RHBZ 2213228)</changelog>
  <changelog author="Guinevere Larsen &lt;blarsen@redhat.com&gt; - 12.1-4.el9" date="1696939200">- Backport "Fix typo in recent code to add stack recursion limit to the Rust demangler."
  (Nick Clifton)
- Backport "Add a recursion limit to the demangle_const function in the Rust demangler."
  (Nick Clifton, RHEL-4234)</changelog>
  <changelog author="Guinevere Larsen &lt;blarsen@redhat.com&gt; - 12.1-5.el9" date="1698667200">- Fix issue introduced when backporting the recursion limit to the rust demangler.</changelog>
</package>
<package pkgid="3d97cf827b209bbbb504b354982d5d33e77312f0bf585711ce483036025e6cb9" name="gcc-toolset-13-libhwasan-devel" arch="aarch64">
  <version epoch="0" ver="13.3.1" rel="2.3.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 13.2.1-5" date="1699876800">- update from releases/gcc-13 branch
  - PRs c++/89038, c/111884, d/110712, d/112270, fortran/67740, fortran/97245,
	fortran/111837, fortran/112316, libbacktrace/111315,
	libbacktrace/112263, libstdc++/110944, libstdc++/111172,
	libstdc++/111936, libstdc++/112089, libstdc++/112314,
	middle-end/111253, middle-end/111818, modula2/111756, modula2/112110,
	target/101177, target/110170, target/111001, target/111366,
	target/111367, target/111380, target/111935, target/112443,
	tree-optimization/111397, tree-optimization/111445,
	tree-optimization/111489, tree-optimization/111583,
	tree-optimization/111614, tree-optimization/111622,
	tree-optimization/111694, tree-optimization/111764,
	tree-optimization/111820, tree-optimization/111833,
	tree-optimization/111917
  - fix aarch64 RA ICE (#2241139, PR target/111528)
- fix ia32 doubleword rotates (#2238781, PR target/110792)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 13.2.1-6" date="1701864000">- update from releases/gcc-13 branch
  - PRs c++/33799, c++/102191, c++/111703, c++/112269, c++/112301, c++/112633,
	c/112339, fortran/111880, fortran/112764, libgomp/111413,
	libstdc++/112348, libstdc++/112491, libstdc++/112607,
	middle-end/111497, target/53372, target/110411, target/111408,
	target/111815, target/111828, target/112672, tree-optimization/111137,
	tree-optimization/111465, tree-optimization/111967,
	tree-optimization/112496
- add -fno-stack-protector to aarch64 tests (RHEL-17684)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 13.2.1-6.1" date="1702296000">- add f95 (RHEL-17655)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 13.2.1-6.2" date="1702641600">- fix for libstdc++_nonshared.a on ppc64le (RHEL-17960)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 13.2.1-6.3" date="1704801600">- use the system dir in --with-libstdcxx-zoneinfo (RHEL-21093)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 13.3.1-1" date="1717070400">- update from releases/gcc-13 branch
  - GCC 13.3 release
  - PRs analyzer/104042, analyzer/108171, analyzer/109251, analyzer/109577,
	analyzer/110014, analyzer/110112, analyzer/110700, analyzer/110882,
	analyzer/111289, analyzer/112790, analyzer/112889, analyzer/112969,
	analyzer/113253, analyzer/113333, analyzer/114408, analyzer/114473,
	bootstrap/106472, bootstrap/114369, c/112571, c/114780, c++/89224,
	c++/97990, c++/100667, c++/103825, c++/110006, c++/111284, c++/112769,
	c++/113141, c++/113966, c++/114303, c++/114377, c++/114537,
	c++/114561, c++/114562, c++/114572, c++/114580, c++/114634,
	c++/114691, c++/114709, debug/112718, driver/111700, fortran/36337,
	fortran/50410, fortran/55978, fortran/89462, fortran/93678,
	fortran/95374, fortran/101135, fortran/102003, fortran/103707,
	fortran/103715, fortran/103716, fortran/104352, fortran/106987,
	fortran/106999, fortran/107426, fortran/110987, fortran/112407,
	fortran/113799, fortran/113866, fortran/113885, fortran/113956,
	fortran/114001, fortran/114474, fortran/114535, fortran/114739,
	fortran/114825, fortran/115039, gcov-profile/114115,
	gcov-profile/114715, ipa/92606, ipa/108007, ipa/111571, ipa/112616,
	ipa/113359, ipa/113907, ipa/113964, jit/110466, libgcc/111731,
	libquadmath/114533, libstdc++/66146, libstdc++/93672,
	libstdc++/104606, libstdc++/107800, libstdc++/108976,
	libstdc++/110050, libstdc++/110054, libstdc++/113841,
	libstdc++/114147, libstdc++/114316, libstdc++/114359,
	libstdc++/114367, libstdc++/114401, libstdc++/114750,
	libstdc++/114803, libstdc++/114863, libstdc++/115063, lto/114655,
	middle-end/110027, middle-end/111151, middle-end/111632,
	middle-end/111683, middle-end/112684, middle-end/112732,
	middle-end/113396, middle-end/113622, middle-end/114070,
	middle-end/114348, middle-end/114552, middle-end/114599,
	middle-end/114734, middle-end/114753, middle-end/114907,
	rtl-optimization/54052, rtl-optimization/114415,
	rtl-optimization/114768, rtl-optimization/114924, sanitizer/97696,
	sanitizer/114687, sanitizer/114743, sanitizer/114956,
	sanitizer/115172, target/88309, target/101865, target/105522,
	target/110621, target/111234, target/111600, target/111610,
	target/111822, target/112397, target/113095, target/113233,
	target/113950, target/114049, target/114130, target/114160,
	target/114172, target/114175, target/114272, target/114747,
	target/114752, target/114794, target/114837, target/114848,
	target/114981, testsuite/111066, testsuite/112297, testsuite/114034,
	testsuite/114036, testsuite/114662, tree-optimization/91838,
	tree-optimization/109925, tree-optimization/110838,
	tree-optimization/111009, tree-optimization/111268,
	tree-optimization/111407, tree-optimization/111736,
	tree-optimization/111882, tree-optimization/112281,
	tree-optimization/112303, tree-optimization/112793,
	tree-optimization/112961, tree-optimization/112991,
	tree-optimization/113552, tree-optimization/113630,
	tree-optimization/113670, tree-optimization/113831,
	tree-optimization/113910, tree-optimization/114027,
	tree-optimization/114115, tree-optimization/114121,
	tree-optimization/114203, tree-optimization/114231,
	tree-optimization/114246, tree-optimization/114375,
	tree-optimization/114396, tree-optimization/114485,
	tree-optimization/114566, tree-optimization/114672,
	tree-optimization/114733, tree-optimization/114736,
	tree-optimization/114749, tree-optimization/114787,
	tree-optimization/114799, tree-optimization/114876,
	tree-optimization/114965, tree-optimization/115143,
	tree-optimization/115152, tree-optimization/115154
- add --without-clang-plugin --without-llvm-plugin to annobin configure
  options</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 13.3.1-2" date="1718107200">- update from releases/gcc-13 branch
  - PRs ada/114398, ada/114708, c/114493, c++/111529, c++/113598,
	fortran/110415, fortran/114827, fortran/115150, libstdc++/114940,
	libstdc++/115269, middle-end/108789, rtl-optimization/114902,
	rtl-optimization/115092, target/113281, target/113719, target/115297,
	target/115317, target/115324, tree-optimization/115192,
	tree-optimization/115307, tree-optimization/115337
- fix a shell condition (RHEL-40722)
- backport a fix for modes_1.f90 (RHEL-40234)
- fix up pointer types to may_alias structures (PR c/114493, RHEL-40244)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 13.3.1-2.1" date="1720785600">- fix wrong RTL patterns for vector merge high/low word on LE (RHEL-45190)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 13.3.1-2.2" date="1738929600">- disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78382)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 13.3.1-2.3" date="1739534400">- bump for another rebuild (RHEL-78382)</changelog>
</package>
<package pkgid="d8a0dae5233a55405813a18b97e4e849bfa44d36a4c7cef5411bbbb2e6a1a654" name="gcc-toolset-14-annobin-libannocheck" arch="aarch64">
  <version epoch="0" ver="12.88" rel="1.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-1" date="1723032000">- Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
- Annocheck: Stop warnings about known gaps.    (RHEL-53218)
- Annocheck: Fix stack realign test.  (#2302427)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-2" date="1723118400">- Spec File: Use correct directory for plugin installation.  (RHEL-53209)
- Spec File: Disable plugin when running on wrong major version of the compiler.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-3" date="1723118401">- Spec File: Disable bootstrapping.  (RHEL-53543)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-4" date="1723118402">- Spec File: Use correct names for the plugins.  (RHEL-53209)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-5" date="1723204800">- Spec File: Use correct names for the symlinks.  (RHEL-53209)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.69-1" date="1723464000">- BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
- Spec File: Use correct names for the symlinks.  (RHEL-53209)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.70-1" date="1723550400">- Clang &amp; LLVM Plugins: Include install directory in binary.  (RHEL-54069)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.70-2" date="1724328000">- NVR Bump to allow rebuilding with annotation.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.87-1" date="1724328001">- Rebase for GTS 14.1 release.  (RHEL-76932)
- Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
- Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
- Annocheck: Fix the --debug-dir option.
- Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
- Annocheck: Remove spurious debugging messages.
- Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
- Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
- Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
- GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
- Testsuite: Use configured compiler when running tests.
- GCC Plugin: Fix building with gcc 15.  (#32429)
- Annocheck: Fix overly long debug messages.
- Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
- Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
- Annocheck: Add --enable-future to enable future fail components in normal tests.
- Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
- Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Add --skip-passes option.
- Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
- Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
- GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.88-1" date="1738584000">- Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77605)</changelog>
</package>
<package pkgid="a4d9936df482b283f5cee93c33d9097652cc8ec619e4c4759682f0c5df2822d1" name="gcc-toolset-14-annobin-plugin-clang" arch="aarch64">
  <version epoch="0" ver="12.88" rel="1.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-1" date="1723032000">- Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
- Annocheck: Stop warnings about known gaps.    (RHEL-53218)
- Annocheck: Fix stack realign test.  (#2302427)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-2" date="1723118400">- Spec File: Use correct directory for plugin installation.  (RHEL-53209)
- Spec File: Disable plugin when running on wrong major version of the compiler.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-3" date="1723118401">- Spec File: Disable bootstrapping.  (RHEL-53543)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-4" date="1723118402">- Spec File: Use correct names for the plugins.  (RHEL-53209)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-5" date="1723204800">- Spec File: Use correct names for the symlinks.  (RHEL-53209)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.69-1" date="1723464000">- BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
- Spec File: Use correct names for the symlinks.  (RHEL-53209)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.70-1" date="1723550400">- Clang &amp; LLVM Plugins: Include install directory in binary.  (RHEL-54069)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.70-2" date="1724328000">- NVR Bump to allow rebuilding with annotation.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.87-1" date="1724328001">- Rebase for GTS 14.1 release.  (RHEL-76932)
- Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
- Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
- Annocheck: Fix the --debug-dir option.
- Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
- Annocheck: Remove spurious debugging messages.
- Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
- Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
- Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
- GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
- Testsuite: Use configured compiler when running tests.
- GCC Plugin: Fix building with gcc 15.  (#32429)
- Annocheck: Fix overly long debug messages.
- Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
- Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
- Annocheck: Add --enable-future to enable future fail components in normal tests.
- Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
- Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Add --skip-passes option.
- Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
- Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
- GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.88-1" date="1738584000">- Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77605)</changelog>
</package>
<package pkgid="bc78aae922f6fef230a1eabc7a6b3650d3ff734dfec0084a912c885e3794f7bc" name="gcc-toolset-14-annobin-plugin-llvm" arch="aarch64">
  <version epoch="0" ver="12.88" rel="1.el9"/>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-1" date="1723032000">- Annocheck: Stop spurious assembler warnings.  (RHEL-53213)
- Annocheck: Stop warnings about known gaps.    (RHEL-53218)
- Annocheck: Fix stack realign test.  (#2302427)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-2" date="1723118400">- Spec File: Use correct directory for plugin installation.  (RHEL-53209)
- Spec File: Disable plugin when running on wrong major version of the compiler.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-3" date="1723118401">- Spec File: Disable bootstrapping.  (RHEL-53543)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-4" date="1723118402">- Spec File: Use correct names for the plugins.  (RHEL-53209)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.67-5" date="1723204800">- Spec File: Use correct names for the symlinks.  (RHEL-53209)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.69-1" date="1723464000">- BuiltBy: Fix seg-fault when comparing language version strings.  (RHEL-53497)
- Spec File: Use correct names for the symlinks.  (RHEL-53209)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.70-1" date="1723550400">- Clang &amp; LLVM Plugins: Include install directory in binary.  (RHEL-54069)</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.70-2" date="1724328000">- NVR Bump to allow rebuilding with annotation.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.87-1" date="1724328001">- Rebase for GTS 14.1 release.  (RHEL-76932)
- Annocheck: Fix locating string notes (again).  Add exception for glibc benchmark tests.  (RHEL-76456)
- Annocheck: Add crtoffloadtableS.o to list of known gcc binaries.  (RHEL-760404)
- Annocheck: Fix the --debug-dir option.
- Annocheck: Fix corrupt warning message when unable to locate separate debug info files.
- Annocheck: Remove spurious debugging messages.
- Annocheck: Always look for annobin notes in separate debug info files.  (RHEL-75778)
- Annocheck: Support multiple --debug-rpm and --debug-file options.  (RHEL-73349)
- Annocheck: Add support for sys-root'ed glibc packages.  (RHEL-71296)
- GCC Plugin: Tidy up use of gcc's diagnoatic headers.  (#32429)
- Testsuite: Use configured compiler when running tests.
- GCC Plugin: Fix building with gcc 15.  (#32429)
- Annocheck: Fix overly long debug messages.
- Annocheck: Rename rwx-seg test to load-segments.  Add more checks.  Add check for gaps as a future fail.
- Annocheck: Add --no-allow-excpetions to disable exceptions for known special binaries.
- Annocheck: Add --enable-future to enable future fail components in normal tests.
- Annocheck: Fix bug preventing the inclusion of the rpm name in reports.
- Annocheck: Add more exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Add --skip-passes option.
- Annocheck: Add exceptions for gcc binaries.  (RHEL-33365)
- Annocheck: Skip property note test for i386 binaries created by LLVM.  (#2323797)
- Annocheck: Skip FORTIFY and GLIBC_ASSERTIONS tests for LLVM produced binaries with unparseable DW_AT_producer attributes in their DWARF debug info.  (RHEL-65411)
- GCC Plugin: Change type of the .annobin.notes section from SHT_STRTAB to SHT_PROGBITS.</changelog>
  <changelog author="Nick Clifton  &lt;nickc@redhat.com&gt; - 12.88-1" date="1738584000">- Annocheck: Look for -fstack-clash-protection in DW_AT_producer string.  (RHEL-77605)</changelog>
</package>
<package pkgid="76ae149e92e6043eb130f4d80e0afaafbdc2817812ba76794e02ea95fb8b0035" name="gcc-toolset-14-libhwasan-devel" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="13.el9"/>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-1.1" date="1723550400">- do not hide _ZSt21ios_base_library_initv</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-1.2" date="1724328000">- bump NVR (RHEL-53492)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-7" date="1737547200">- update from releases/gcc-14 branch (RHEL-74061)
  - PRs ada/113036, ada/113868, ada/115917, ada/117328, ada/117996,
	analyzer/115724, c/117641, c/117745, c/117802, c++/100358, c++/101463,
	c++/102594, c++/109859, c++/113108, c++/114854, c++/115008,
	c++/115430, c++/115657, c++/116108, c++/116634, c++/117158,
	c++/117317, c++/117614, c++/117615, c++/117792, c++/117825,
	c++/117845, c++/117880, c++/117925, c++/117985, c++/118060,
	c++/118069, driver/117942, fortran/84674, fortran/84869,
	fortran/105054, fortran/109105, fortran/109345, fortran/115070,
	fortran/115348, fortran/116388, fortran/117730, fortran/117763,
	fortran/117774, fortran/117791, fortran/117797, fortran/117819,
	fortran/117820, fortran/117843, fortran/117897, libgomp/117851,
	libstdc++/89624, libstdc++/106212, libstdc++/106676, libstdc++/108236,
	libstdc++/109517, libstdc++/109976, libstdc++/112349,
	libstdc++/112641, libstdc++/117520, libstdc++/117560,
	libstdc++/117822, libstdc++/117962, libstdc++/117966,
	libstdc++/118035, libstdc++/118093, middle-end/43374,
	middle-end/102674, middle-end/116997, middle-end/117433,
	middle-end/117458, middle-end/117459, middle-end/117847,
	middle-end/118024, modula2/114529, modula2/115003, modula2/115057,
	modula2/115164, modula2/115276, modula2/115328, modula2/115536,
	modula2/115540, modula2/115804, modula2/115823, modula2/115957,
	modula2/116048, modula2/116181, modula2/116378, modula2/116557,
	modula2/116918, modula2/117120, modula2/117371, modula2/117555,
	modula2/117660, modula2/117904, modula2/117948, other/116603,
	preprocessor/117118, rtl-optimization/113994, rtl-optimization/116799,
	rtl-optimization/117095, sanitizer/117960, target/64242,
	target/114801, target/114942, target/116371, target/116629,
	target/116999, target/117045, target/117105, target/117304,
	target/117357, target/117408, target/117418, target/117443,
	target/117500, target/117525, target/117562, target/117564,
	target/117642, target/117659, target/117675, target/117744,
	target/117926, testsuite/103298, testsuite/109360,
	tree-optimization/94589, tree-optimization/112376,
	tree-optimization/116463, tree-optimization/117142,
	tree-optimization/117254, tree-optimization/117307,
	tree-optimization/117333, tree-optimization/117398,
	tree-optimization/117417, tree-optimization/117439,
	tree-optimization/117574, tree-optimization/117594,
	tree-optimization/117612, tree-optimization/117912
- fix up -freport-bug default (#2330362, RHEL-70192)
- revert -mearly-ldp-fusion and -mlate-ldp-fusion default to enabled on
  aarch64 to match upstream (RHEL-74059)
- consider TARGET_EXPR invariant like SAVE_EXPR (PR c++/118509)
- have gfortran require install-info (RHEL-62417)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 14.2.1-7.1" date="1738929600">- disable jQuery use, don't ship jquery.js (CVE-2020-11023, RHEL-78387)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-8" date="1747915200">- libstdc++: Fix -Warray-bounds warning in std::vector&lt;bool&gt; (RHEL-90244)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-9" date="1747915201">- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-84679)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-10" date="1748433600">- Put the libstdc++ AS_NEEDED in the right places (RHEL-84679)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-11" date="1756296000">- Fix ICE in rebuild_jump_labels on aarch64-linux-gnu (RHEL-106790)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-12" date="1756987200">- Fix glibc32 dependency (RHEL-112209)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-13" date="1767873600">- Add missing headers arm_neon_sve_bridge.h and arm_sme.h for aarch64 (RHEL-124589)</changelog>
</package>
<package pkgid="c9e96ceaf5f271246cd0780773ef2dc74c83b4c77c6a3a523a14701910a86afb" name="gcc-toolset-15-libhwasan-devel" arch="aarch64">
  <version epoch="0" ver="15.2.1" rel="7.1.el9_8"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749038400">- re-enable annobin-plugin and offload-nvptx</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.2" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95564)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.3" date="1749729600">- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-94866)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.4" date="1750075200">- ship libstdc++.modules.json (RHEL-97095)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1757419200">- Fix glibc32 build dependency (RHEL-113182)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116513)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7.1" date="1772712000">- Always inline _M_extract_name (RHEL-150603)</changelog>
</package>
<package pkgid="2f99dd49ed1e5831d98de9a006aa24da54d57fc839cfb64744c021cbac12dd51" name="gd-progs" arch="aarch64">
  <version epoch="0" ver="2.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.5-11" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.2.5-12" date="1580472000">- Add patch(gd-2.2.5-null-pointer.patch) - fix Null pointer reference in gdImageClone (gdImagePtr src)
- Resolves: #1599032</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1585051200">- update to 2.3.0
- add dependency on libraqm
- remove gdlib-config</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-2" date="1594814400">- fix gdImageStringFT() fails for empty strings
  https://github.com/libgd/libgd/issues/615</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.3.1-1" date="1612353600">- Upstream released new version 2.3.1
- patch bug615 is no more needed - fixed by upstream in release
- gdimagestring16/gdimagestring16 gdimagestringup16/gdimagestringup16 passed on
  x390s - XFAIL_TEST definition for x390s is no more necessary</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 2.3.2-1" date="1615982400">- Add condition if fedora for packages not available in RHEL
- enable avif support
- use bcond
- rebase to version 2.3.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ab7604c7478520096501fa758ddeff7564fe108effbced1910bb425e64104709" name="gdk-pixbuf2-tests" arch="aarch64">
  <version epoch="0" ver="2.42.6" rel="6.el9_8.1"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 2.42.6-4" date="1715774400">- Backport fixes for CVE-2022-48622
- Resolves: RHEL-36432</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.42.6-5" date="1752235200">- Backport fixes for CVE-2025-7345
- Resolves: RHEL-102354</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.42.6-6" date="1752235201">- Fix an oversight
- Related: RHEL-102354</changelog>
  <changelog author="Benjamin Otte &lt;botte@redhat.com - 2.42.6-6.1" date="1776772800">- Backport fixes for CVE-2026-5201
- Related: RHEL-163069</changelog>
</package>
<package pkgid="50159c5a675df747885dedebc0968717e13b8505db5c0e1f4cfee95aae5c771e" name="gedit-devel" arch="aarch64">
  <version epoch="2" ver="40.0" rel="6.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2:3.38.0-1" date="1599825600">- Update to 3.38.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2:3.38.1-1" date="1606305600">- Update to 3.38.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:3.38.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2:3.38.1-3" date="1613822400">- Don't use gsettings key that was removed from nautilus 40 (#1931020)</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2:40.0-1" date="1616587200">- Update to 40.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2:40.0-2" date="1616587201">- Filter provides for plugin .so files</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2:40.0-3" date="1617364800">- Add 40.0 release info to appdata</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 2:40.0-4" date="1618488000">- Drop tepl dependency
  Related: #1948446</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:40.0-5" date="1618488001">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:40.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f62c8fac3e7934f6638b4dc8d2e29ead6aa8e358275253a2e8eb70a8014a0aa4" name="gegl04-devel" arch="aarch64">
  <version epoch="0" ver="0.4.62" rel="1.el9"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 0.4.34-3" date="1696334400">- Rebuild against new LibRaw soname
Resolves: RHEL-770</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.58-1" date="1745496000">- New upstream release 0.4.58 (RHEL-88143)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.62-1" date="1747742400">- New upstream release 0.4.62 (RHEL-88143)</changelog>
</package>
<package pkgid="00a675272f3e82a7ad8b35e15271f7d03e255207eec57197a27c8c514b0a786b" name="gegl04-devel" arch="aarch64">
  <version epoch="0" ver="0.4.62" rel="1.el9_8.1"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.58-1" date="1745496000">- New upstream release 0.4.58 (RHEL-88143)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.62-1" date="1747742400">- New upstream release 0.4.62 (RHEL-88143)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.4.62-1.1" date="1783944000">- Fix CVE-2026-2050 (RHEL-188266)</changelog>
</package>
<package pkgid="13448cbd7c8bd716b34c1efe5193450a97c4733961a8403c7fd3867ddd40b89f" name="geolite2-asn" arch="noarch">
  <version epoch="0" ver="20191217" rel="6.el9"/>
  <changelog author="Carl George &lt;carl@george.computer&gt; - 20190806-1" date="1565697600">- Latest upstream
- Add ASN subpackage</changelog>
  <changelog author="Carl George &lt;carl@george.computer&gt; - 20191008-1" date="1570536000">- Latest upstream</changelog>
  <changelog author="Carl George &lt;carl@george.computer&gt; - 20191217-1" date="1576756800">- Latest upstream</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-3" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20191217-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20191217-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20191217-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="471381954f8b2ab2e0c49c3709fcf3e3cdba0bea9e5df99d7ca7b7b6fadd39ce" name="ghostscript-gtk" arch="aarch64">
  <version epoch="0" ver="9.54.0" rel="19.el9_6"/>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 9.54.0-12" date="1690891200">- fix for CVE-2023-36664
- Resolves: rhbz#2217810</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 9.54.0-13" date="1691150400">- fix for CVE-2023-38559
- Resolves: rhbz#2224372</changelog>
  <changelog author="Richard Lescak &lt;rlescak@redhat.com&gt; - 9.54.0-14" date="1698408000">- fix for CVE-2023-43115
- Resolves: RHEL-10185</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.54.0-16" date="1718884800">- RHEL-38839 CVE-2024-33871 ghostscript: OPVP device arbitrary code execution via custom Driver library</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.54.0-17" date="1720440000">- RHEL-44759 CVE-2024-33870 ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
- RHEL-44745 CVE-2024-33869 ghostscript: path traversal and command execution due to path reduction
- RHEL-44731 CVE-2024-29510 ghostscript: format string injection leads to shell command execution (SAFER bypass)</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.54.0-18" date="1744718400">- RHEL-18397 CVE-2023-46751 ghostscript: dangling pointer in gdev_prn_open_printer_seekable()
- RHEL-67048 CVE-2024-46951 ghostscript: Arbitrary Code Execution in Artifex Ghostscript Pattern Color Space
- RHEL-67053 CVE-2024-46954 ghostscript: Directory Traversal in Ghostscript via Overlong UTF-8 Encoding
- RHEL-67053 CVE-2024-46953 ghostscript: Path Traversal and Code Execution via Integer Overflow in Ghostscript
- RHEL-67053 CVE-2024-46956 ghostscript: Out-of-Bounds Data Access in Ghostscript Leads to Arbitrary Code Execution</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 9.54.0-19" date="1746619200">- RHEL-88966 CVE-2025-27832 ghostscript: NPDL device: Compression buffer overflow</changelog>
</package>
<package pkgid="bdf9a51952e12954306977f40190b929dc2eb72adb4a9808b4bd2361bcdf155a" name="giflib-utils" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="10.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10" date="1774353600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.1" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="9f8f17e3720dffe3484013e86bd0fdacac367edf06c731e2879d3ba84e321de0" name="giflib-utils" arch="aarch64">
  <version epoch="0" ver="5.2.1" rel="10.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10" date="1774353600">- fix CVE-2026-23868: double free in GifMakeSavedImage (RHEL-154864)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.1" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 5.2.1-10.2" date="1780920000">- fix CVE-2026-26740: buffer overflow in EGifGCBToExtension (RHEL-157133)</changelog>
</package>
<package pkgid="ceb0dc5887acc07024263f2fc7543c58cbd5a4fccf727961520cca5f9b9540c3" name="gimp-devel" arch="aarch64">
  <version epoch="2" ver="3.0.4" rel="4.el9_8.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.2-1" date="1747051200">- Rebase to 3.0.2 stable version (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-1" date="1747742400">- Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-2" date="1763640000">- fix CVE-2025-10920
- fix CVE-2025-10921
- fix CVE-2025-10922
- fix CVE-2025-10923
- fix CVE-2025-10924
- fix CVE-2025-10925
- fix CVE-2025-10934</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-3" date="1768910400">- fix CVE-2025-14424
- fix CVE-2025-14425
- fix CVE-2025-14423
- fix CVE-2025-14422</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4" date="1770724800">- fix CVE-2025-15059</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.1" date="1772798400">- fix CVE-2026-0797
- fix CVE-2026-2044
- fix CVE-2026-2045
- fix CVE-2026-2047
- fix CVE-2026-2048</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@redhat.com&gt; - 2:3.0.4-4.2" date="1779192000">- Bump release</changelog>
</package>
<package pkgid="1e05270881d6de64bcc541432221e25bcf1095856f8c0fc2535956fd53534146" name="gimp-devel" arch="aarch64">
  <version epoch="2" ver="3.0.4" rel="4.el9_8.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.2-1" date="1747051200">- Rebase to 3.0.2 stable version (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-1" date="1747742400">- Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-2" date="1763640000">- fix CVE-2025-10920
- fix CVE-2025-10921
- fix CVE-2025-10922
- fix CVE-2025-10923
- fix CVE-2025-10924
- fix CVE-2025-10925
- fix CVE-2025-10934</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-3" date="1768910400">- fix CVE-2025-14424
- fix CVE-2025-14425
- fix CVE-2025-14423
- fix CVE-2025-14422</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4" date="1770724800">- fix CVE-2025-15059</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.1" date="1773057600">- fix CVE-2026-0797
- fix CVE-2026-2044
- fix CVE-2026-2045
- fix CVE-2026-2047
- fix CVE-2026-2048</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.2" date="1773144000">- bump spec</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2:3.0.4-4.3" date="1777982400">- fix CVE-2026-4150
- Resolves: RHEL-167738</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.4" date="1778500800">- fix CVE-2026-4150 - align with Y-stream
- fix CVE-2026-4151
- fix CVE-2026-4152
- fix CVE-2026-4153
- fix CVE-2026-4154
- fix CVE-2026-4887</changelog>
</package>
<package pkgid="3f37b4433217f8a2af608a7c5c694a1feddfe0f88da893b0c5dc66067f2d1bac" name="gimp-devel" arch="aarch64">
  <version epoch="2" ver="3.0.4" rel="4.el9_8.5"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.2-1" date="1747051200">- Rebase to 3.0.2 stable version (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-1" date="1747742400">- Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-2" date="1763640000">- fix CVE-2025-10920
- fix CVE-2025-10921
- fix CVE-2025-10922
- fix CVE-2025-10923
- fix CVE-2025-10924
- fix CVE-2025-10925
- fix CVE-2025-10934</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-3" date="1768910400">- fix CVE-2025-14424
- fix CVE-2025-14425
- fix CVE-2025-14423
- fix CVE-2025-14422</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4" date="1770724800">- fix CVE-2025-15059</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.1" date="1773057600">- fix CVE-2026-0797
- fix CVE-2026-2044
- fix CVE-2026-2045
- fix CVE-2026-2047
- fix CVE-2026-2048</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.2" date="1773144000">- bump spec</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2:3.0.4-4.3" date="1777982400">- fix CVE-2026-4150
- Resolves: RHEL-167738</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.4" date="1778500800">- fix CVE-2026-4150 - align with Y-stream
- fix CVE-2026-4151
- fix CVE-2026-4152
- fix CVE-2026-4153
- fix CVE-2026-4154
- fix CVE-2026-4887</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.5" date="1783166400">- fix CVE-2026-58379
- Resolves: RHEL-192170</changelog>
</package>
<package pkgid="9f4408b6e73af835e2516f4e3957123c57f43a17c64bd7b0229eff99d42b7c7b" name="gimp-devel" arch="aarch64">
  <version epoch="2" ver="3.0.4" rel="4.el9_8.7"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-1" date="1747742400">- Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-2" date="1763640000">- fix CVE-2025-10920
- fix CVE-2025-10921
- fix CVE-2025-10922
- fix CVE-2025-10923
- fix CVE-2025-10924
- fix CVE-2025-10925
- fix CVE-2025-10934</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-3" date="1768910400">- fix CVE-2025-14424
- fix CVE-2025-14425
- fix CVE-2025-14423
- fix CVE-2025-14422</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4" date="1770724800">- fix CVE-2025-15059</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.1" date="1773057600">- fix CVE-2026-0797
- fix CVE-2026-2044
- fix CVE-2026-2045
- fix CVE-2026-2047
- fix CVE-2026-2048</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.2" date="1773144000">- bump spec</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2:3.0.4-4.3" date="1777982400">- fix CVE-2026-4150
- Resolves: RHEL-167738</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.4" date="1778500800">- fix CVE-2026-4150 - align with Y-stream
- fix CVE-2026-4151
- fix CVE-2026-4152
- fix CVE-2026-4153
- fix CVE-2026-4154
- fix CVE-2026-4887</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.5" date="1783166400">- fix CVE-2026-58379
- Resolves: RHEL-192170</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.6" date="1783684800">- fix CVE-2026-58384
- Resolves: RHEL-192536</changelog>
</package>
<package pkgid="83b8f6f6339702853719fe2443b71a47c478d8275d5df626c1f2042f7ca562cf" name="gimp-devel" arch="aarch64">
  <version epoch="2" ver="3.0.4" rel="4.el9_8.9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4" date="1770724800">- fix CVE-2025-15059</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.1" date="1773057600">- fix CVE-2026-0797
- fix CVE-2026-2044
- fix CVE-2026-2045
- fix CVE-2026-2047
- fix CVE-2026-2048</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.2" date="1773144000">- bump spec</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2:3.0.4-4.3" date="1777982400">- fix CVE-2026-4150
- Resolves: RHEL-167738</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.4" date="1778500800">- fix CVE-2026-4150 - align with Y-stream
- fix CVE-2026-4151
- fix CVE-2026-4152
- fix CVE-2026-4153
- fix CVE-2026-4154
- fix CVE-2026-4887</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.5" date="1783166400">- fix CVE-2026-58379
- Resolves: RHEL-192170</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.6" date="1783684800">- fix CVE-2026-58384
- Resolves: RHEL-192536</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.7" date="1783944000">- fix CVE-2026-58380
- Resolves: RHEL-192383</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.8" date="1785240000">- fix CVE-2026-66758
- fix CVE-2026-66759</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.9" date="1785844800">- fix CVE-2026-42169</changelog>
</package>
<package pkgid="2ec09ce087c3bbede3e210286f20b48b18296f91fe4ac9288990daa685f48569" name="gimp-devel-tools" arch="aarch64">
  <version epoch="2" ver="3.0.4" rel="4.el9_8.2"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.2-1" date="1747051200">- Rebase to 3.0.2 stable version (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-1" date="1747742400">- Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-2" date="1763640000">- fix CVE-2025-10920
- fix CVE-2025-10921
- fix CVE-2025-10922
- fix CVE-2025-10923
- fix CVE-2025-10924
- fix CVE-2025-10925
- fix CVE-2025-10934</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-3" date="1768910400">- fix CVE-2025-14424
- fix CVE-2025-14425
- fix CVE-2025-14423
- fix CVE-2025-14422</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4" date="1770724800">- fix CVE-2025-15059</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.1" date="1772798400">- fix CVE-2026-0797
- fix CVE-2026-2044
- fix CVE-2026-2045
- fix CVE-2026-2047
- fix CVE-2026-2048</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@redhat.com&gt; - 2:3.0.4-4.2" date="1779192000">- Bump release</changelog>
</package>
<package pkgid="c3ab3a289474b83182926b8581534a6e0bda1a510b580627b4372432a8cacf91" name="gimp-devel-tools" arch="aarch64">
  <version epoch="2" ver="3.0.4" rel="4.el9_8.4"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.2-1" date="1747051200">- Rebase to 3.0.2 stable version (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-1" date="1747742400">- Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-2" date="1763640000">- fix CVE-2025-10920
- fix CVE-2025-10921
- fix CVE-2025-10922
- fix CVE-2025-10923
- fix CVE-2025-10924
- fix CVE-2025-10925
- fix CVE-2025-10934</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-3" date="1768910400">- fix CVE-2025-14424
- fix CVE-2025-14425
- fix CVE-2025-14423
- fix CVE-2025-14422</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4" date="1770724800">- fix CVE-2025-15059</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.1" date="1773057600">- fix CVE-2026-0797
- fix CVE-2026-2044
- fix CVE-2026-2045
- fix CVE-2026-2047
- fix CVE-2026-2048</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.2" date="1773144000">- bump spec</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2:3.0.4-4.3" date="1777982400">- fix CVE-2026-4150
- Resolves: RHEL-167738</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.4" date="1778500800">- fix CVE-2026-4150 - align with Y-stream
- fix CVE-2026-4151
- fix CVE-2026-4152
- fix CVE-2026-4153
- fix CVE-2026-4154
- fix CVE-2026-4887</changelog>
</package>
<package pkgid="895e97e179d14ad0d3a3a8cd8c36629cc0c0f6f6bbc163694d232d80572569b0" name="gimp-devel-tools" arch="aarch64">
  <version epoch="2" ver="3.0.4" rel="4.el9_8.5"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.2-1" date="1747051200">- Rebase to 3.0.2 stable version (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-1" date="1747742400">- Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-2" date="1763640000">- fix CVE-2025-10920
- fix CVE-2025-10921
- fix CVE-2025-10922
- fix CVE-2025-10923
- fix CVE-2025-10924
- fix CVE-2025-10925
- fix CVE-2025-10934</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-3" date="1768910400">- fix CVE-2025-14424
- fix CVE-2025-14425
- fix CVE-2025-14423
- fix CVE-2025-14422</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4" date="1770724800">- fix CVE-2025-15059</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.1" date="1773057600">- fix CVE-2026-0797
- fix CVE-2026-2044
- fix CVE-2026-2045
- fix CVE-2026-2047
- fix CVE-2026-2048</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.2" date="1773144000">- bump spec</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2:3.0.4-4.3" date="1777982400">- fix CVE-2026-4150
- Resolves: RHEL-167738</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.4" date="1778500800">- fix CVE-2026-4150 - align with Y-stream
- fix CVE-2026-4151
- fix CVE-2026-4152
- fix CVE-2026-4153
- fix CVE-2026-4154
- fix CVE-2026-4887</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.5" date="1783166400">- fix CVE-2026-58379
- Resolves: RHEL-192170</changelog>
</package>
<package pkgid="9bcc4e58473231093e3b32605c81b2de1bb5f952d9481aced648eb14abaef812" name="gimp-devel-tools" arch="aarch64">
  <version epoch="2" ver="3.0.4" rel="4.el9_8.7"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-1" date="1747742400">- Rebase to 3.0.4 stable version and exclude s390x arch (RHEL-40106)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-2" date="1763640000">- fix CVE-2025-10920
- fix CVE-2025-10921
- fix CVE-2025-10922
- fix CVE-2025-10923
- fix CVE-2025-10924
- fix CVE-2025-10925
- fix CVE-2025-10934</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-3" date="1768910400">- fix CVE-2025-14424
- fix CVE-2025-14425
- fix CVE-2025-14423
- fix CVE-2025-14422</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4" date="1770724800">- fix CVE-2025-15059</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.1" date="1773057600">- fix CVE-2026-0797
- fix CVE-2026-2044
- fix CVE-2026-2045
- fix CVE-2026-2047
- fix CVE-2026-2048</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.2" date="1773144000">- bump spec</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2:3.0.4-4.3" date="1777982400">- fix CVE-2026-4150
- Resolves: RHEL-167738</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.4" date="1778500800">- fix CVE-2026-4150 - align with Y-stream
- fix CVE-2026-4151
- fix CVE-2026-4152
- fix CVE-2026-4153
- fix CVE-2026-4154
- fix CVE-2026-4887</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.5" date="1783166400">- fix CVE-2026-58379
- Resolves: RHEL-192170</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.6" date="1783684800">- fix CVE-2026-58384
- Resolves: RHEL-192536</changelog>
</package>
<package pkgid="481e4d1abbcc41fc0eb2158a79387f0feee39cfa03b2fbf3193ed42ba0055b09" name="gimp-devel-tools" arch="aarch64">
  <version epoch="2" ver="3.0.4" rel="4.el9_8.9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4" date="1770724800">- fix CVE-2025-15059</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.1" date="1773057600">- fix CVE-2026-0797
- fix CVE-2026-2044
- fix CVE-2026-2045
- fix CVE-2026-2047
- fix CVE-2026-2048</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.2" date="1773144000">- bump spec</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2:3.0.4-4.3" date="1777982400">- fix CVE-2026-4150
- Resolves: RHEL-167738</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 2:3.0.4-4.4" date="1778500800">- fix CVE-2026-4150 - align with Y-stream
- fix CVE-2026-4151
- fix CVE-2026-4152
- fix CVE-2026-4153
- fix CVE-2026-4154
- fix CVE-2026-4887</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.5" date="1783166400">- fix CVE-2026-58379
- Resolves: RHEL-192170</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.6" date="1783684800">- fix CVE-2026-58384
- Resolves: RHEL-192536</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.7" date="1783944000">- fix CVE-2026-58380
- Resolves: RHEL-192383</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.8" date="1785240000">- fix CVE-2026-66758
- fix CVE-2026-66759</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2:3.0.4-4.9" date="1785844800">- fix CVE-2026-42169</changelog>
</package>
<package pkgid="80af4818d19666303303ecaa3ee3d24d10d0706be3b7d9636c15cf2c75d29755" name="gjs-tests" arch="aarch64">
  <version epoch="0" ver="1.68.6" rel="4.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.68.1-2" date="1621252800">- Bundle mozjs (#1958111)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.68.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.68.3-1" date="1629288000">- Update to 1.68.3
  Resolves: #1993764</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 1.68.3-2" date="1629288001">- Rebuilt for libffi 3.4.2 SONAME transition. Related: rhbz#1891914</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.68.4-1" date="1636027200">- Update to 1.68.4
- Increate test timeouts to make it more reliable on armv7
Resolves: #2005774</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.68.5-1" date="1645531200">- Update to 1.68.5
Resolves: #2054085</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.68.6-1" date="1649160000">- Update to 1.68.6
Resolves: #2066167</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.68.6-2" date="1676462400">- Guard against invalid gobject property access
Resolves: #2170044</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 1.68.6-4" date="1684238400">- Always initialize callback return value
Resolves: #2196877</changelog>
</package>
<package pkgid="e7dd46d9f37c98ef031f21d2da7885448b7b56251388533bc30d51472139dd55" name="glib-networking-tests" arch="aarch64">
  <version epoch="0" ver="2.68.3" rel="3.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.68~rc-1" date="1615809600">- Update to 2.68.rc</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 2.68.0-1" date="1616414400">- Update to 2.68.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.68.0-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.1-1" date="1620043200">- Update to 2.68.1
- Resolves: #1947188</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.1-2" date="1623067200">- Disable libproxy in RHEL
- Resolves: #1968554</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.68.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.2-1" date="1630584000">- Update to 2.68.2
- Resolves: #1993765</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.3-1" date="1638792000">- Update to 2.68.3
- Resolves: #1947187</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.3-2" date="1645531200">- Reenable libproxy dependency
- Resolves: #2056988</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.68.3-3" date="1645704000">- Recommends: libproxy-webkitgtk4 for glib-pacrunner
- Related: #2056988</changelog>
</package>
<package pkgid="dec2d0a51473f6617e639654814257744b8711459263b9cce6093dd0f1dabc80" name="glusterfs-api-devel" arch="aarch64">
  <version epoch="0" ver="6.0" rel="57.4.el9"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-52" date="1611835200">- fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-53" date="1613044800">- fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-54" date="1614772800">- fixes bugs bz#1832306 bz#1911292 bz#1924044</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Tamar Shacked &lt;tshacked@redhat.com&gt; - 6.0-56.3" date="1627300800">- Rebase with latest RHGS-3.5.4
- Fix changlog chronological order by removing unneeded changelogs
- fixes bug bz#1939340</changelog>
  <changelog author="Tamar Shacked &lt;tshacked@redhat.com&gt; - 6.0-56.4" date="1627819200">- remove unneeded file with ambiguous licence
- fixes bug bz#1939340</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.0-57.4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7f974cb0116681ad858cedb61b68e09634d5763c7962b79c322174e7f98dceb4" name="glusterfs-devel" arch="aarch64">
  <version epoch="0" ver="6.0" rel="57.4.el9"/>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-52" date="1611835200">- fixes bugs bz#1600459 bz#1719171 bz#1830713 bz#1856574</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-53" date="1613044800">- fixes bugs bz#1224906 bz#1691320 bz#1719171 bz#1814744 bz#1865796</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-54" date="1614772800">- fixes bugs bz#1832306 bz#1911292 bz#1924044</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-55" date="1616155200">- fixes bugs bz#1939372</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56" date="1618401600">- fixes bugs bz#1948547</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.1" date="1619092800">- fixes bugs bz#1927235</changelog>
  <changelog author="Gluster Jenkins &lt;dkhandel+glusterjenkins@redhat.com&gt; - 6.0-56.2" date="1620302400">- fixes bugs bz#1953901</changelog>
  <changelog author="Tamar Shacked &lt;tshacked@redhat.com&gt; - 6.0-56.3" date="1627300800">- Rebase with latest RHGS-3.5.4
- Fix changlog chronological order by removing unneeded changelogs
- fixes bug bz#1939340</changelog>
  <changelog author="Tamar Shacked &lt;tshacked@redhat.com&gt; - 6.0-56.4" date="1627819200">- remove unneeded file with ambiguous licence
- fixes bug bz#1939340</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.0-57.4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="bb6c51e636a5c932cf484c34af59266958071ea48bdb734a07b0664cafe54648" name="gmp-static" arch="aarch64">
  <version epoch="1" ver="6.2.0" rel="13.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:6.2.0-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-9" date="1629288000">- Move the .hmac files to the fipscheck subfolder
- Make symlinks from their original location (Fedora contains the .hmac files there) pointing to their new location
Resolves: rhbz#1980758</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-10" date="1630065600">- Add the support for intel CET
Resolves: rhbz#1977890</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-11" date="1686052800">Fix: Integer overflow and resultant buffer overflow via crafted input
Resolves: CVE-2021-43618</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-12" date="1689681600">- Add SIMD optimization patches for s390x (provided by the IBM)
Resolves: rhbz#2044216</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1:6.2.0-13" date="1691064000">- Fix: previous commit removed one function from the library and thus broke the ABI
- function gmpn_preinv_divrem_1 should now not be removed
Related: rhbz#2044216</changelog>
</package>
<package pkgid="b5ce5c4ae16870c0366e098158b4b7bd44dd6ba4ba32918bb577cff5461a26f2" name="gnome-calculator-devel" arch="aarch64">
  <version epoch="0" ver="40.1" rel="2.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.0-1" date="1599825600">- Update to 3.38.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.1-1" date="1601899200">- Update to 3.38.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.2-1" date="1606305600">- Update to 3.38.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.38.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40~beta-1" date="1613649600">- Update to 40.beta
- Drop old gcalctool obsoletes</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40~rc-1" date="1615809600">- Update to 40.rc</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40.0-1" date="1616414400">- Update to 40.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 40.0-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40.1-1" date="1620216000">- Update to 40.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 40.1-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="23e68f68baa37ca41435c6dd29e7e0cb7d23105d8eec26ca74b04841af5eb1dc" name="gnome-desktop3-tests" arch="aarch64">
  <version epoch="0" ver="40.4" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.38.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40~alpha.0-1" date="1612958400">- Update to 40.alpha.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40~beta-1" date="1613908800">- Update to 40.beta</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40~rc-1" date="1616068800">- Update to 40.rc</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40.0-1" date="1616414400">- Update to 40.0</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 40.0-2" date="1617278400">+ gnome-desktop3-40.0-2
- Re-add mistakenly removed debug utilities</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 40.0-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40.1-1" date="1620216000">- Update to 40.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 40.1-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 40.4-1" date="1629374400">- Update to 40.4</changelog>
</package>
<package pkgid="818c9f897bbb299b643637947d7453b1a442edb7e64d1bd39873d90ecb0b80c4" name="gnome-settings-daemon-devel" arch="aarch64">
  <version epoch="0" ver="40.0.1" rel="24.el9"/>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 40.0.1-15" date="1704801600">- Fix crashers in g-s-d and control-center related to
  making subscription-manager a soft dep
  Related: RHEL-20449</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 40.0.1-16" date="1705579200">- Try to start rhsm if it's not already running
  Related: RHEL-20449</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 40.0.1-17" date="1711368000">- Fix usb-protection crash when when screensaver service is unavailable
  Related: RHEL-19295</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 40.0.1-18" date="1730203200">- Fix smartcards only working when cold-plugged
  Related: RHEL-47261</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 40.0.1-19" date="1737374400">- Fix default power-button-action setting for servers
  Related: RHEL-71937</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 40.0.1-20" date="1738238400">- Make "Register System" notification launch registration dialog directly
  Related: RHEL-4101</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 40.0.1-21" date="1740657600">- Add build option to disable subman plugin
  Related: RHEL-4092</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 40.0.1-22" date="1741089600">- Use mount path in "Low disk" notification when multiple mount points have same name
  Related: RHEL-11910</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 40.0.1-23" date="1760961600">- Delay startup registration notification by 30 minutes
  Resolves: RHEL-4094</changelog>
  <changelog author="Felipe Borges &lt;feborges@redhat.com&gt; - 40.0.1-24" date="1761739200">- Improve reliability of the startup registration notification
  Resolves: RHEL-4094</changelog>
</package>
<package pkgid="26dd8f424121a86af4520e5277f915e64aad4e6c6f58195c5337a27ef31d275f" name="gnome-shell-extension-common" arch="noarch">
  <version epoch="0" ver="40.7" rel="19.el9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-10" date="1699358400">- Include dash-to-panel extension
  Resolves: RHEL-14935</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-11" date="1702555200">- Handle missing main dock when restoring dash
  Resolves: RHEL-16723</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-12" date="1706875200">- Hide classification banners from picks
  Resolves: RHEL-22789</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-13" date="1709726400">- Notify on desktop icon drags
  Resolves: RHEL-26989</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-14" date="1710849600">- Prefer window icons in window list
  Resolves: RHEL-24713</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-15" date="1710849601">- Handle touch events in desktop icons
  Resolves: RHEL-22713</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-16" date="1712145600">- Improve workspace previews
  Resolves: RHEL-25016</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-17" date="1713528000">- Fix downstream stylesheets
  Resolves: RHEL-25016</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-18" date="1716292800">- Add "move-clock" extension
  Resolves: RHEL-33429</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-19" date="1719921600">- Extend workspace buttons to screen edge
  Resolves: RHEL-43545</changelog>
</package>
<package pkgid="f6b856efcc2820053f1ea240650f3b4c882b9bcb8345a84cbf5d7400d87e9946" name="gnome-shell-extension-move-clock" arch="noarch">
  <version epoch="0" ver="40.7" rel="19.el9"/>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-10" date="1699358400">- Include dash-to-panel extension
  Resolves: RHEL-14935</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-11" date="1702555200">- Handle missing main dock when restoring dash
  Resolves: RHEL-16723</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-12" date="1706875200">- Hide classification banners from picks
  Resolves: RHEL-22789</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-13" date="1709726400">- Notify on desktop icon drags
  Resolves: RHEL-26989</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-14" date="1710849600">- Prefer window icons in window list
  Resolves: RHEL-24713</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-15" date="1710849601">- Handle touch events in desktop icons
  Resolves: RHEL-22713</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-16" date="1712145600">- Improve workspace previews
  Resolves: RHEL-25016</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-17" date="1713528000">- Fix downstream stylesheets
  Resolves: RHEL-25016</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-18" date="1716292800">- Add "move-clock" extension
  Resolves: RHEL-33429</changelog>
  <changelog author="Florian M&#xFC;llner &lt;fmuellner@redhat.com&gt; - 40.7-19" date="1719921600">- Extend workspace buttons to screen edge
  Resolves: RHEL-43545</changelog>
</package>
<package pkgid="0eee28e4501e301bfbc6c44e88af8c887661c63dd8d4eb222ec79e519ead579f" name="gnome-software" arch="aarch64">
  <version epoch="0" ver="41.5" rel="3.el9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.0-1" date="1632139200">- Resolves: #2005770 (Update to 41.0)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.0-2" date="1634040000">- Resolves: #2012699 (Backport changes from Fedora 35)
- Add patch to mark compulsory only repos, not apps from it
- Resolves: #2011176 (flathub repo can't be added through gnome-software)
- Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
- Resolves: #2010353 (Optional repos cannot be disabled)
- Resolves: #2010740 (Refresh on repository setup change)
- Resolves: #2009063 (Correct update notifications)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.1-1" date="1635768000">- Resolves: #2018871 (Update to 41.1)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.2-1" date="1638792000">- Resolves: #2029323 (Update to 41.2)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.3-1" date="1641816000">- Resolves: #2038805 (Update to 41.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.3-2" date="1643630400">- Resolves: #2048397 (Optional software repos can't be disabled)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.4-1" date="1644840000">- Resolves: #2054082 (Update to 41.4)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.5-1" date="1647864000">- Resolves: #2066164 (Update to 41.5)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.5-2" date="1663848000">- Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
- Resolves: #2129021 (Hide some errors in non-debug builds)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.5-3" date="1691064000">- Resolves: #2228374 (Rebuild to move gnome-software-devel into CRB)</changelog>
</package>
<package pkgid="0b9f764692c91d29c8773192416d6a4a1d0fa1450f7da3809db79c55f0fba899" name="gnome-software-rpm-ostree" arch="aarch64">
  <version epoch="0" ver="41.5" rel="3.el9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.0-1" date="1632139200">- Resolves: #2005770 (Update to 41.0)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.0-2" date="1634040000">- Resolves: #2012699 (Backport changes from Fedora 35)
- Add patch to mark compulsory only repos, not apps from it
- Resolves: #2011176 (flathub repo can't be added through gnome-software)
- Resolves: #2010660 (gs-repos-dialog: Can show also desktop applications)
- Resolves: #2010353 (Optional repos cannot be disabled)
- Resolves: #2010740 (Refresh on repository setup change)
- Resolves: #2009063 (Correct update notifications)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.1-1" date="1635768000">- Resolves: #2018871 (Update to 41.1)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.2-1" date="1638792000">- Resolves: #2029323 (Update to 41.2)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.3-1" date="1641816000">- Resolves: #2038805 (Update to 41.3)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.3-2" date="1643630400">- Resolves: #2048397 (Optional software repos can't be disabled)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.4-1" date="1644840000">- Resolves: #2054082 (Update to 41.4)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.5-1" date="1647864000">- Resolves: #2066164 (Update to 41.5)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.5-2" date="1663848000">- Resolves: #2128812 (Correct property name in GsRemovalDialog .ui file)
- Resolves: #2129021 (Hide some errors in non-debug builds)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 41.5-3" date="1691064000">- Resolves: #2228374 (Rebuild to move gnome-software-devel into CRB)</changelog>
</package>
<package pkgid="45b637b61bb86e7af18800cf76c77c27384e822c95756ffe87100758516e1340" name="gnu-efi-utils" arch="aarch64">
  <version epoch="1" ver="3.0.11" rel="8.el9"/>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 3.0.9-3" date="1566820800">- Fix some minor rpmlint complaints
- Pull recent patches from upstream
- Add support for ELF constructors and destructors
- Fix a minor licensing problem</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; 3.0.9-4" date="1577361600">- Upstream patch for efibind.h
- Latest ELF constructors/destructors patch
- Minor spec cleanups</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 3.0.11-1" date="1579694400">- Update to 3.0.11 (via patches generated from git)
- Plus newer upstream fixes (also via patches generated from git)
- Fix shell exit failures in make
- Fix .reloc section generation
- Fix CHAR8 definition
- Fix "make DESTDIR=..."
- Change the installed .a/.o layout
- Provide makefiles for consumers to use.
- Make the -devel noarch since it's just headers.
- Add a bunch of compatibility symlinks for the 3.0.8 filesystem layout
  These will go away once we've migrated everything using them in fedora
  to use the newer make system...</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 3.0.11-2" date="1579867200">- Make a compat subpackage to provide the old paths to our libraries, linker
  script, and includes.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peter Jones &lt;pjones@redhat.com&gt; - 3.0.11-4" date="1580212801">- Fix a mistake building -compat</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="57eed67140bbe41a59aff0a7cb6f5ab95630323bfed59aed3bc598e85128da67" name="golang-github-cpuguy83-go-md2man" arch="aarch64">
  <version epoch="0" ver="1.0.7" rel="13.el9"/>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.7-3" date="1533038400">- build with new scl macros for go-toolset</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.7-4" date="1533556800">- use go-toolset-1.10-golang for rhel8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.7-5" date="1533556801">- temp disable i686</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.7-6" date="1533556802">- re-enable all go_arches</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.7-7" date="1533556803">- use go-compiler for i686 and non-rhel-8</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.7-8" date="1533556804">- go-toolset and go-compiler needed by all arches</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.7-9" date="1533556805">- update distro conditionals and go deps</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.7-10" date="1533556806">- use both go-compilers and go-toolset on all rhel arches</changelog>
  <changelog author="Lokesh Mandvekar &lt;lsm5@redhat.com&gt; - 1.0.7-11" date="1533556807">- disable i686 temporarily</changelog>
  <changelog author="bstinson@centosproject.org - 1.0.7-13" date="1574251200">- Build on i686</changelog>
</package>
<package pkgid="f62d3c8477c56b7a98287bea9aa7ad8de6cb2d2f15da2d3b82ecf59522e73a19" name="golang-github-redhatinsights-yggdrasil-devel" arch="noarch">
  <version epoch="0" ver="0.4.1" rel="1.el9"/>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 0.4.1-1" date="1713182400">- Initial package (RHEL-29800)</changelog>
</package>
<package pkgid="0af7c094b6041253344f85c55f16a8d232cd797bf25be138833ff7549cdc410e" name="gom-devel" arch="aarch64">
  <version epoch="0" ver="0.4" rel="6.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.3.3-10" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.3.3-11" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.3-12" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 0.4-1" date="1581940800">+ gom-0.4-1
- Update to 0.4</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.4-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e7a3d903ff4b137cdb5f32a26dcfd617bc60536aa63d3d2fc18e66a2a2ac2d56" name="google-droid-fonts-all" arch="noarch">
  <version epoch="0" ver="20200215" rel="11.el9.2"/>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1583150400">- 20200215-3
✅ Lint, lint, lint and lint again</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1585828800">- 20200215-4
👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1585828801">- 20200215-5
💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
  valid</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1587988800">- 20200215-6
🐞 Workaround Fedora problems created by rpm commit 93604e2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt;" date="1599825600">- 20200215-8
- Fix this spec file to build for F33+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200215-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200215-10" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 20200215-10.1" date="1623758400">- Add OFL to License tag for DroidSansDevanagari font.
  Resolves: rhbz#1972027</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200215-11.1" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ae1ec6ac443d846b7fd1b0962fe6438d074355e0a316daa72c3b7eb3ac9de32b" name="google-guice" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="ae75082d2e3ef8fcc5f9d826ca81636af1f1cce2ffde74d16b7c34d43539c541" name="google-guice" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b11cec9a65f377409f8e49fd9be02289012896cc5ca7a5a79afff98c731c7572" name="google-guice-javadoc" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="10.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-10" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="5101e0a0a946bb76113542322a9d5f19d0f3dd980f9e50b5a77e128a22390563" name="google-guice-javadoc" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="556ff9543ee284e7c737b05b8e355254941a6505fefe21c2c521bcca6992f49b" name="google-guice-javadoc" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="37d5a0f35f0a832345725d845fa83d52ecd4c110c8064a1b7b9fbda431c8f5d2" name="google-guice-javadoc" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="02105118d17763ba67799436cf62868c60aed8b367e0f5d54d4e2d96c0dcbb7e" name="google-guice-javadoc" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c07367126db6a3cc246756275aca999232dec18b33c73ac94ead1aebcecfeaca" name="google-noto-cjk-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="e93375a2a9f393262f4a594b1bd08335f62a077a0925bc3c4e7734643733927f" name="google-noto-cjk-fonts-common" arch="noarch">
  <version epoch="0" ver="20201206" rel="4.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20190416-5" date="1565697600">- Update 65-google-noto-cjk-fonts.conf for HK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20201206-1" date="1610971200">- Update to v20201206</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20201206-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f35d1fc9d6eec2c2d4723f0615c7124033631c9d5474b325ce7dfb49cdffa701" name="google-noto-sans-cjk-hk-fonts" arch="noarch">
  <version epoch="0" ver="20201206" rel="4.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20190416-5" date="1565697600">- Update 65-google-noto-cjk-fonts.conf for HK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20201206-1" date="1610971200">- Update to v20201206</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20201206-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b2f4a39593249a4feb7db039a318bb40202fed59c3065c133f1d99773eec6c06" name="google-noto-sans-cjk-kr-fonts" arch="noarch">
  <version epoch="0" ver="20201206" rel="4.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20190416-5" date="1565697600">- Update 65-google-noto-cjk-fonts.conf for HK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20201206-1" date="1610971200">- Update to v20201206</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20201206-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d02058363ce2fe197c993e1a61b60914e432448600dd74b25c7033c5de7297c3" name="google-noto-sans-cjk-sc-fonts" arch="noarch">
  <version epoch="0" ver="20201206" rel="4.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20190416-5" date="1565697600">- Update 65-google-noto-cjk-fonts.conf for HK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20201206-1" date="1610971200">- Update to v20201206</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20201206-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c9353e3c909ecab043bf71e7d19aac9b45e893f814f98f414cf3c0bc5a69b23a" name="google-noto-sans-cjk-tc-fonts" arch="noarch">
  <version epoch="0" ver="20201206" rel="4.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20190416-5" date="1565697600">- Update 65-google-noto-cjk-fonts.conf for HK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20201206-1" date="1610971200">- Update to v20201206</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20201206-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8324e7fdae3c1bb2d33916d7e3b2e3bd44d92cc944162a1905630d9b2094b770" name="google-noto-sans-hk-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="1c0fd76bd9a0e6bf73959dcd2d5a4c5cdddf4c2772b818163f3631ff1726ae1a" name="google-noto-sans-jp-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="ec0ee45ee41fe61d43c94215883480f80d3db0887318a4c742d2eecdb51ca12c" name="google-noto-sans-kr-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="e831d877d9b84a37c15ca068b7234b3bd71adc1d994d193251c11ca7b3f156eb" name="google-noto-sans-mono-cjk-hk-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="d781c6c659b2e59394e91c4e03157e9abeb24881e309026cc59e044263d5de8d" name="google-noto-sans-mono-cjk-jp-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="713eb2edf1d8c4f60dbf3de812f7ea3dad7e3982ce4165fe9f9c2fda3715acd1" name="google-noto-sans-mono-cjk-kr-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="bd10aa63bbc52f3a031cceabe216afd04af1b3204a81a15f7a2f7ac6256756c0" name="google-noto-sans-mono-cjk-sc-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="eabfae628cd7bccbc6cb996c1fd4cf90eef00e12164d8c43870bfdbaf8fb434a" name="google-noto-sans-mono-cjk-tc-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="262a495184a1c9172bba708584a55396dcbe94bc4f74a323b565b8e46b3ead20" name="google-noto-sans-sc-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="75e78b4ad1e9c4718d239e495f64d69bafe0041de66a93b26d0815124b13b000" name="google-noto-sans-tc-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="00292a1a6ebee47d5425a80ba37c448ac60a4f2c67447bbd1071e1405a4c2ccf" name="google-noto-serif-cjk-jp-fonts" arch="noarch">
  <version epoch="0" ver="20201206" rel="4.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20190416-5" date="1565697600">- Update 65-google-noto-cjk-fonts.conf for HK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20201206-1" date="1610971200">- Update to v20201206</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20201206-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="11761d447d9cf9417df7eafc32f085d8c7baa3b778413944b0404c91c5226657" name="google-noto-serif-cjk-kr-fonts" arch="noarch">
  <version epoch="0" ver="20201206" rel="4.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20190416-5" date="1565697600">- Update 65-google-noto-cjk-fonts.conf for HK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20201206-1" date="1610971200">- Update to v20201206</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20201206-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="01a055155b1d265a1c524ffe66fb796f3b800648b9a6b6f25a208f8727c3181d" name="google-noto-serif-cjk-sc-fonts" arch="noarch">
  <version epoch="0" ver="20201206" rel="4.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20190416-5" date="1565697600">- Update 65-google-noto-cjk-fonts.conf for HK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20201206-1" date="1610971200">- Update to v20201206</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20201206-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="bad86d193613fb5e4db345f1d3ff8acbd75f37c172d741f473f1aea2d0fadd74" name="google-noto-serif-cjk-tc-fonts" arch="noarch">
  <version epoch="0" ver="20201206" rel="4.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20190416-5" date="1565697600">- Update 65-google-noto-cjk-fonts.conf for HK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190416-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20201206-1" date="1610971200">- Update to v20201206</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20201206-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20201206-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="05d4876a0b4488e7987160d2a7d7f1e8fed895fedc8b9e424467699fdcdaa9c9" name="google-noto-serif-jp-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="f36a1c624c0bb5e73b32672b99c14d0a1b06f0a53f183a00053a2da98a9dc2bb" name="google-noto-serif-kr-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="e07eed6bcf68376f24d7acea693ee31de1a6766c11a34d838056e83ef6a44878" name="google-noto-serif-sc-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="e58ca56177c419646d02f0fdac2b6e8f181f8586e3ccbb3a427d939dabb0f183" name="google-noto-serif-tc-fonts" arch="noarch">
  <version epoch="0" ver="20230817" rel="2.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-1" date="1698926400">- Update Noto CJK to Sans 2.004 and Serif 2.002
- Drop some Noto CJK Language Specific OTFs sub packages
- Resolves: RHEL-13738</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 20230817-2" date="1700740800">- Add google-noto-sans-cjk-jp-fonts back
- Resolves: RHEL-13738</changelog>
</package>
<package pkgid="1b74fcc72fb35e9a635bd2664828b7ddc1bb83adb1df2b30374d696d17cdbcb8" name="gpm-static" arch="aarch64">
  <version epoch="0" ver="1.20.7" rel="29.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.7-20" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
- Add upstream commits for git master which contains patches 9, 10 and 11
- Add GCC10 fix
- Cleanups</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.20.7-21" date="1582372800">- Better comments in spec file</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 1.20.7-22" date="1592481600">- Two patches have been upstreamed</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 1.20.7-23" date="1593000000">- Do not run gpm in the container (#1524034)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.7-24" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.20.7-25" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.20.7-26" date="1616587200">- Fix License tag</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.20.7-27" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.20.7-28" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jiri Kucera &lt;jkucera@redhat.com&gt; - 1.20.7-29" date="1629115200">- Review covscan issues
  Resolves: #1938733</changelog>
</package>
<package pkgid="a2519b9fa5adbed097c103b57a90e12ff7be7736051400391c51077248050fd6" name="graphene-tests" arch="aarch64">
  <version epoch="0" ver="1.10.6" rel="2.el9"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1.10.2-4" date="1597060800">- Disable LTO for now</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1.10.2-5" date="1601294400">- Re-enable LTO as upstream GCC target/96939 has been fixed</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.2-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.10.4-1" date="1612958400">- Update to 1.10.4</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1.10.4-2" date="1615291200">- Disable neon for graphene on armv7hl
- Add meson_test</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.10.4-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 1.10.4-4" date="1619524800">- Rebuild with newer gobject-introspection to fix multilib conflict
- Related: rhbz#1915340</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 1.10.4-5" date="1620043200">- Fix ray intersection bug causing picking errors in mutter
  Resolves: #1956294</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.10.6-1" date="1620388800">- Update to 1.10.6</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.10.6-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1c02598a01a19ca6e19c15919f69338225d1ad0d73e6173c26fd18ee631facce" name="graphviz-graphs" arch="aarch64">
  <version epoch="0" ver="2.44.0" rel="26.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-25" date="1642680000">- Fixed gvpack to run
  Resolves: rhbz#2029565</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-26" date="1701691200">- Rebuilt for graphviz-ruby addition
  Resolves: RHEL-17134</changelog>
</package>
<package pkgid="0666782adb5e42e9985409d9bf3862d05dfa7e5259bd49058d680722df46948f" name="graphviz-java" arch="aarch64">
  <version epoch="0" ver="2.44.0" rel="26.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-25" date="1642680000">- Fixed gvpack to run
  Resolves: rhbz#2029565</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-26" date="1701691200">- Rebuilt for graphviz-ruby addition
  Resolves: RHEL-17134</changelog>
</package>
<package pkgid="92b262ad339fd0781ae487e90599f3175c06d83c36e7aad6811f49321501f8db" name="graphviz-lua" arch="aarch64">
  <version epoch="0" ver="2.44.0" rel="26.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-25" date="1642680000">- Fixed gvpack to run
  Resolves: rhbz#2029565</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-26" date="1701691200">- Rebuilt for graphviz-ruby addition
  Resolves: RHEL-17134</changelog>
</package>
<package pkgid="d06cf724279d4627fc3be16cb3bd94f0574e9c3a00e8e0d031adf8b9c069a7b2" name="graphviz-ocaml" arch="aarch64">
  <version epoch="0" ver="2.44.0" rel="26.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-25" date="1642680000">- Fixed gvpack to run
  Resolves: rhbz#2029565</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-26" date="1701691200">- Rebuilt for graphviz-ruby addition
  Resolves: RHEL-17134</changelog>
</package>
<package pkgid="30d7da0dce58fa42035e911627aba177017bc1901b0725e2848fc735c6376d81" name="graphviz-perl" arch="aarch64">
  <version epoch="0" ver="2.44.0" rel="26.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-25" date="1642680000">- Fixed gvpack to run
  Resolves: rhbz#2029565</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-26" date="1701691200">- Rebuilt for graphviz-ruby addition
  Resolves: RHEL-17134</changelog>
</package>
<package pkgid="ef4840bfaf431e6d100db6123697ff90fa80214687417b6d8710cc97321ffb50" name="graphviz-tcl" arch="aarch64">
  <version epoch="0" ver="2.44.0" rel="26.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-25" date="1642680000">- Fixed gvpack to run
  Resolves: rhbz#2029565</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.44.0-26" date="1701691200">- Rebuilt for graphviz-ruby addition
  Resolves: RHEL-17134</changelog>
</package>
<package pkgid="6bf9c25d80e09fd4c62aa96eb2789391012eb10e01bd49ce31a5b035612fc30f" name="groff-doc" arch="noarch">
  <version epoch="0" ver="1.22.4" rel="10.el9"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-1" date="1583409600">- Update to version 1.22.4
  resolves: #1808072</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-3" date="1601640000">- Use make macros</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-4" date="1604404800">- Move pdfpic.tmac to groff-base
  resolves: #1888370</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-6" date="1613995200">- Add psutils as a runtime dependency (needed for groff -Thtml)</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-7" date="1615982400">- Make psutils a weak dependency</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-10" date="1633953600">- Fix several important Covscan defects
  resolves: #1938735</changelog>
</package>
<package pkgid="a606e6c780deb3ac59a5d5a1cc4e7b5c5649b42103d9ffe51b7ed74f739270e4" name="groff-perl" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="10.el9"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-1" date="1583409600">- Update to version 1.22.4
  resolves: #1808072</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-3" date="1601640000">- Use make macros</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-4" date="1604404800">- Move pdfpic.tmac to groff-base
  resolves: #1888370</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-6" date="1613995200">- Add psutils as a runtime dependency (needed for groff -Thtml)</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-7" date="1615982400">- Make psutils a weak dependency</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-10" date="1633953600">- Fix several important Covscan defects
  resolves: #1938735</changelog>
</package>
<package pkgid="9f0c8683744847f5fd0768e3998f204095e76b51b26885737ba4ddf9cd88ac4e" name="groff-x11" arch="aarch64">
  <version epoch="0" ver="1.22.4" rel="10.el9"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-1" date="1583409600">- Update to version 1.22.4
  resolves: #1808072</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-3" date="1601640000">- Use make macros</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-4" date="1604404800">- Move pdfpic.tmac to groff-base
  resolves: #1888370</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.4-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-6" date="1613995200">- Add psutils as a runtime dependency (needed for groff -Thtml)</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-7" date="1615982400">- Make psutils a weak dependency</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.4-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.22.4-10" date="1633953600">- Fix several important Covscan defects
  resolves: #1938735</changelog>
</package>
<package pkgid="b235d360f41573ba3290a0b58c7e9717f463196d31906c1822a1b1f203d26398" name="grub2-emu" arch="aarch64">
  <version epoch="1" ver="2.06" rel="126.el9_8.alma.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-118" date="1762257600">- spec: Update RHEL x86_64 and aarch64 signing key to redhatsecureboot802
- Resolves: #RHEL-126136</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-119" date="1763380800">- ieee1275: Upstream patches for appended signature support
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-120" date="1764763200">- appendedsig: Fix grub-mkimage with an unaligned appended signature size
- Related: #RHEL-24742</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-121" date="1764936000">- rpminspect: disable abidiff inspections
- Resolves: #RHEL-106446</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-122" date="1770206400">- Fix several security issues about module unloading and file handling
- Resolved: #RHEL-141594
- Resolves: #CVE-2025-54771 #CVE-2025-61661
- Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-123" date="1770379200">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24742</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.06-124" date="1770984000">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-125" date="1772712000">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146555</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.06-126" date="1773057600">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148310</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:2.06-126.alma.1" date="1774872000">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ee1752770766cde57fa23821c68e2b80f05d81ef0ff82f6a5fb128ab3972c473" name="grub2-emu-modules" arch="aarch64">
  <version epoch="1" ver="2.06" rel="126.el9_8.alma.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-118" date="1762257600">- spec: Update RHEL x86_64 and aarch64 signing key to redhatsecureboot802
- Resolves: #RHEL-126136</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-119" date="1763380800">- ieee1275: Upstream patches for appended signature support
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-120" date="1764763200">- appendedsig: Fix grub-mkimage with an unaligned appended signature size
- Related: #RHEL-24742</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-121" date="1764936000">- rpminspect: disable abidiff inspections
- Resolves: #RHEL-106446</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-122" date="1770206400">- Fix several security issues about module unloading and file handling
- Resolved: #RHEL-141594
- Resolves: #CVE-2025-54771 #CVE-2025-61661
- Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-123" date="1770379200">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24742</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.06-124" date="1770984000">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-125" date="1772712000">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146555</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.06-126" date="1773057600">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148310</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:2.06-126.alma.1" date="1774872000">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="dad4ee6815b482ad7e5884d16878977dfd5c8b8e6c02b3e64e0a67e00fdbb3c8" name="grub2-pc-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="126.el9_8.alma.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-118" date="1762257600">- spec: Update RHEL x86_64 and aarch64 signing key to redhatsecureboot802
- Resolves: #RHEL-126136</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-119" date="1763380800">- ieee1275: Upstream patches for appended signature support
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-120" date="1764763200">- appendedsig: Fix grub-mkimage with an unaligned appended signature size
- Related: #RHEL-24742</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-121" date="1764936000">- rpminspect: disable abidiff inspections
- Resolves: #RHEL-106446</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-122" date="1770206400">- Fix several security issues about module unloading and file handling
- Resolved: #RHEL-141594
- Resolves: #CVE-2025-54771 #CVE-2025-61661
- Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-123" date="1770379200">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24742</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.06-124" date="1770984000">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-125" date="1772712000">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146555</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.06-126" date="1773057600">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148310</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:2.06-126.alma.1" date="1774872000">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="3bf7f350b67f0578d43772990db2de1b838ff2299c539130f023e98d7e8ebeb6" name="grub2-ppc64le-modules" arch="noarch">
  <version epoch="1" ver="2.06" rel="126.el9_8.alma.1"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-118" date="1762257600">- spec: Update RHEL x86_64 and aarch64 signing key to redhatsecureboot802
- Resolves: #RHEL-126136</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-119" date="1763380800">- ieee1275: Upstream patches for appended signature support
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-120" date="1764763200">- appendedsig: Fix grub-mkimage with an unaligned appended signature size
- Related: #RHEL-24742</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; 2.06-121" date="1764936000">- rpminspect: disable abidiff inspections
- Resolves: #RHEL-106446</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-122" date="1770206400">- Fix several security issues about module unloading and file handling
- Resolved: #RHEL-141594
- Resolves: #CVE-2025-54771 #CVE-2025-61661
- Resolves: #CVE-2025-61662 #CVE-2025-61663 #CVE-2025-61664</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-123" date="1770379200">- ppc/mkimage/appendedsig: Upstream code sync for alignment and sbat
- Related: #RHEL-24742</changelog>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; 2.06-124" date="1770984000">- ppc64le: Pointing to the right cert after redhat-release change
- Related: #RHEL-24742</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; 2.06-125" date="1772712000">- ppc64le/sbat: Add an sbat CSV file for ppc64le
- Resolves: #RHEL-146555</changelog>
  <changelog author="Josue Hernandez &lt;josherna@redhat.com&gt; 2.06-126" date="1773057600">- kern/efi/mm: Change grub_efi_mm_add_regions() to keep track of map allocation size
- Resolves: #RHEL-148310</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:2.06-126.alma.1" date="1774872000">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="3e16b49f84acb999641d7edc4612610ca2e2600bd3f785ea645c104c0df892fa" name="grubby-deprecated" arch="aarch64">
  <version epoch="0" ver="8.40" rel="69.el9"/>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 8.40-64" date="1704888000">- Do not overwrite all vars that start with GRUB_CMDLINE_LINUX
- Resolves: #RHEL-21301</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-65" date="1733400000">- On grub cfg updates, run grub2-mkconfig for Xen systems
  Resolves: #RHEL-50691</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-66" date="1733486400">- grubby-bls: on PPC systems, remove petiboot's version checks
- Resolves: #RHEL-61421</changelog>
  <changelog author="Nicolas Frayer &lt;nfrayer@redhat.com&gt; - 8.40-67" date="1747656000">- Bump NVR
- Related: #RHEL-61421</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-68" date="1753876800">- Update cfg when setting a default kernel
  Resolves: #RHEL-106612</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 8.40-69" date="1756900800">- grubby-bls: in s390* systems, run zipl on grub cfg update event
  Resolves: #RHEL-106612</changelog>
</package>
<package pkgid="e64f346a895b749cbc58039e9885c6add0cd2384599982819938ccdf71a501ae" name="gsm-tools" arch="aarch64">
  <version epoch="0" ver="1.0.19" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.18-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.0.19-1" date="1585742400">- New version
  Resolves: rhbz#1818181</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.0.19-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.19-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.19-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.19-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.19-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b98c071539636c4982f9a579b3a4dacf9cfe7997bfa11424678a7fff4afc4348" name="gsound-devel" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-11" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-12" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.2-14" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.2-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5814cf75ba862f2b65a8e7d2c6042d90579f8e3e309d208a2a372929c4d81737" name="gstreamer1-plugins-good-qt" arch="aarch64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.1"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
</package>
<package pkgid="f38d78641df88a65eb84ba2330447c8c1ef9448c84e5c23c53085f74fc2e7630" name="gstreamer1-plugins-good-qt" arch="aarch64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.2"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
</package>
<package pkgid="abd1cd59361ea34b834991939d497003182295cb637659f3ae8766a6172009ba" name="gstreamer1-plugins-good-qt" arch="aarch64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.4"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1786622400">- Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata
  parsing in avidemux to prevent unsigned integer underflow
  Resolves: RHEL-239060</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.4" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239042</changelog>
</package>
<package pkgid="193bba0cd046074bd6108b8461beb9ee1bd981a91d761e52ad6b3ff4bbce8da1" name="gstreamer1-plugins-good-qt" arch="aarch64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8.8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156267, RHEL-156266</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-7.1" date="1783512000">- Rebase rhel-9.8.0 from 1.18.4 to 1.22.12 to resync with rhel-9.7.0/c9s
  (this branch had regressed to a stale pre-1.22.12 base)
  Resolves: RHEL-156269, RHEL-156270
- Fix CVE-2026-53705: integer overflow in wavpack decoder, re-applied
  on top of the correct 1.22.12 base
  Resolves: RHEL-184477</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.2" date="1786104000">- Fix CVE-2026-18649: limit fragmentation unit size in RTP H.264/H.265
  depayloaders to prevent excessive memory usage
  Resolves: RHEL-224162</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.3" date="1786622400">- Fix CVE-2026-73433: add bounds checks to FUJIFILM strd metadata
  parsing in avidemux to prevent unsigned integer underflow
  Resolves: RHEL-239060</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.4" date="1786622401">- Fix CVE-2026-73434: out-of-bounds read in AVI demuxer vprp handling
  Resolves: RHEL-239042</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.5" date="1787400000">- Fix CVE-2026-18295: validate box sizes in qtmoovrecover to prevent
  heap buffer overflow (same upstream fix as CVE-2026-18296)
  Resolves: RHEL-246380</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.6" date="1787400001">- Fix CVE-2026-18298 in gdkpixbufdec element
  Resolves: RHEL-246572</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.7" date="1787400002">- Fix CVE-2026-18296: size validation in qtmoovrecover MRF parsing
  Resolves: RHEL-246558</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 1.22.12-7.8" date="1787400003">- Fix CVE-2026-18299: Use-After-Free in rtpsbcdepay
  Resolves: RHEL-246619</changelog>
</package>
<package pkgid="bf368422a3b1a6a8c639e0d62bfcf1ffa896d7c865385fb8d34bd15faa964edc" name="gstreamer1-plugins-good-qt" arch="aarch64">
  <version epoch="0" ver="1.22.12" rel="7.el9_8"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.22.9-1" date="1713441600">- Revert back to 1.22.9 (accidentally merged Rawhide to f40)</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.22.11-1" date="1713441601">- 1.22.11</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.22.11-2" date="1714132800">- Qt6 re-rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.22.12-1" date="1714478400">- 1.22.12</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-4" date="1734091200">- Apply patches for CVE-2024-47537, CVE-2024-47539, CVE-2024-47540
  CVE-2024-47543, CVE-2024-47544, CVE-2024-47545, CVE-2024-47546,
  CVE-2024-47596, CVE-2024-47597, CVE-2024-47598, CVE-2024-47599,
  CVE-2024-47601, CVE-2024-47602, CVE-2024-47603, CVE-2024-47606,
  CVE-2024-47613, CVE-2024-47774, CVE-2024-47775, CVE-2024-47776,
  CVE-2024-47777, CVE-2024-47778, CVE-2024-47834
- Resolves: RHEL-70958, RHEL-70971, RHEL-71033, RHEL-71195
- Resolves: RHEL-71210, RHEL-71202, RHEL-71171, RHEL-71200
- Resolves: RHEL-71206, RHEL-71173, RHEL-71198, RHEL-71204
- Resolves: RHEL-71208, RHEL-71031, RHEL-71007, RHEL-71039
- Resolves: RHEL-71169, RHEL-71192, RHEL-71161, RHEL-71167
- Resolves: RHEL-71189</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-5" date="1774612800">- Apply patches for CVE-2026-3083, CVE-2026-3085
  Resolves: RHEL-156272, RHEL-156273</changelog>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.22.12-6" date="1774872000">- Rebuild for z-stream
  Resolves: RHEL-156272, RHEL-156273</changelog>
  <changelog author="Veronika Kabatova &lt;vkabatov@redhat.com&gt; - 1.22.12-7" date="1774958400">- Rebuild to fix missing binaries due to buildsystem oversight</changelog>
</package>
<package pkgid="76d25842e3d9cad377f266f016dad506400bc7133dfebd87136c65c7f17a1e0d" name="gstreamer1-rtsp-server-devel" arch="aarch64">
  <version epoch="0" ver="1.22.12" rel="3.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.5-1" date="1689940800">- Update to 1.22.5</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.22.7-1" date="1699963200">- 1.22.7</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.22.8-1" date="1702900800">- 1.22.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.8-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22.8-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.22.9-1" date="1706184000">- 1.22.9</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.22.11-1" date="1713441600">- 1.22.11</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.22.12-1" date="1714478400">- 1.22.12</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-2" date="1731067200">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.22.12-3" date="1731153600">- Rebuild
- Resolves: RHEL-38511, RHEL-41157</changelog>
</package>
<package pkgid="edcd8306f2c533553b18474e8357e5fbe7254cab9524928bb3d7a3c22d6c5a19" name="gtk3-immodules" arch="aarch64">
  <version epoch="0" ver="3.24.31" rel="8.el9"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-3" date="1714651200">- Reduce the height of window titlebars</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-4" date="1715774400">- Actually reduce the height of window titlebars</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-5" date="1720612800">- Stop looking for modules in cwd (CVE-2024-6655)
- Resolves: RHEL-46993</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-6" date="1747051200">- Resolves: RHEL-4130
- Resolves: RHEL-22853
- Resolves: RHEL-4098</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-7" date="1749556800">- Dummy commit to get ci to rerun
- Related: RHEL-4098</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-8" date="1751457600">- Resolves: RHEL-4098</changelog>
</package>
<package pkgid="34b4c4f4613422c7a689f786babc242a8ba62d3d633914bdb3921309375926f3" name="gtk3-immodules" arch="aarch64">
  <version epoch="0" ver="3.24.31" rel="9.el9_8"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-3" date="1714651200">- Reduce the height of window titlebars</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-4" date="1715774400">- Actually reduce the height of window titlebars</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-5" date="1720612800">- Stop looking for modules in cwd (CVE-2024-6655)
- Resolves: RHEL-46993</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-6" date="1747051200">- Resolves: RHEL-4130
- Resolves: RHEL-22853
- Resolves: RHEL-4098</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-7" date="1749556800">- Dummy commit to get ci to rerun
- Related: RHEL-4098</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-8" date="1751457600">- Resolves: RHEL-4098</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.24.31-9" date="1776686400">- Switch stylus button order to match compositor
  Resolves: RHEL-146566</changelog>
</package>
<package pkgid="cd7290bf00fd846bfea05807296433cc3630cdce2b60f3bffe7929bc1ccad76c" name="gtk3-tests" arch="aarch64">
  <version epoch="0" ver="3.24.31" rel="8.el9"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-3" date="1714651200">- Reduce the height of window titlebars</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-4" date="1715774400">- Actually reduce the height of window titlebars</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-5" date="1720612800">- Stop looking for modules in cwd (CVE-2024-6655)
- Resolves: RHEL-46993</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-6" date="1747051200">- Resolves: RHEL-4130
- Resolves: RHEL-22853
- Resolves: RHEL-4098</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-7" date="1749556800">- Dummy commit to get ci to rerun
- Related: RHEL-4098</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-8" date="1751457600">- Resolves: RHEL-4098</changelog>
</package>
<package pkgid="915647810daa0e50f94fd4c02c0477e343b0fc29cdc35152323ca2ebcc8d1594" name="gtk3-tests" arch="aarch64">
  <version epoch="0" ver="3.24.31" rel="9.el9_8"/>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-3" date="1714651200">- Reduce the height of window titlebars</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-4" date="1715774400">- Actually reduce the height of window titlebars</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-5" date="1720612800">- Stop looking for modules in cwd (CVE-2024-6655)
- Resolves: RHEL-46993</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-6" date="1747051200">- Resolves: RHEL-4130
- Resolves: RHEL-22853
- Resolves: RHEL-4098</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-7" date="1749556800">- Dummy commit to get ci to rerun
- Related: RHEL-4098</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 3.24.31-8" date="1751457600">- Resolves: RHEL-4098</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.24.31-9" date="1776686400">- Switch stylus button order to match compositor
  Resolves: RHEL-146566</changelog>
</package>
<package pkgid="24ee1052d3fb5753387b10b971ed9aef1de51a931d00f495757bfbc2132d1cb4" name="gtk4-devel-tools" arch="aarch64">
  <version epoch="0" ver="4.12.3" rel="2.el9"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 4.4.1-2" date="1657713600">- Ensure Wayland gets the Wayland IM context
  Resolves: #2087031</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 4.12.3-1" date="1701345600">- Update to 4.12.3
  Resolves: RHEL-842</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 4.12.3-2" date="1701950400">- Do not try to implement color glyphs without Pango help
  Resolves: RHEL-842</changelog>
</package>
<package pkgid="95397dde7f36adf1ee5fa737165c067825405551d36a6b20e80056fc2a896d01" name="gtksourceview4-tests" arch="aarch64">
  <version epoch="0" ver="4.8.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 4.8.1-1" date="1614686400">- Update to 4.8.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.8.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.8.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com - 4.8.1-4" date="1674648000">- Fix decrement number feature
  Resolves: #2062786</changelog>
  <changelog author="Ray Strode &lt;rstrode@redhat.com&gt; - 4.8.1-5" date="1674734400">- Add build and test suite fix for single core VMs
  Related: #2062786</changelog>
</package>
<package pkgid="6ef89cae3d5edc14021cd669317ad1f5d68d6d708266f9245d4193c9f6d027c2" name="guava" arch="noarch">
  <version epoch="0" ver="31.0.1" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 25.0-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 29.0-1" date="1600430400">- Update to upstream version 29.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 30.1-1" date="1611662400">- Update to upstream version 30.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 25.0-10" date="1611662401">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 30.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 30.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 31.0.1-1" date="1634212800">- Update to 31.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31.0.1-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 31.0.1-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31.0.1-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="10d5a7666d5075249c18e1a41b716f6894394a47bf26f631e36588dba30ba573" name="guava" arch="noarch">
  <version epoch="0" ver="33.3.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 32.1.3-1" date="1700568000">- Update to upstream version 32.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 32.1.3-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 32.1.3-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 33.2.1-1" date="1721131200">- Update to upstream version 33.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 33.2.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33.3.0-1" date="1724241600">- Update to upstream version 33.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33.3.0-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e9d725611ef604c277c2c9cd6bab5d0706fa0a8cb21d6404c8bbee51e59fbab0" name="guava-javadoc" arch="noarch">
  <version epoch="0" ver="30.1" rel="10.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 30.1-6" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 30.1-7" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 30.1-8" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 30.1-9" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 30.1-10" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="a7e968369b0b0120e4cd809fe1154f31e836501d30d7849669586f4b77cbc157" name="guava-javadoc" arch="noarch">
  <version epoch="0" ver="31.0.1" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 25.0-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 29.0-1" date="1600430400">- Update to upstream version 29.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 30.1-1" date="1611662400">- Update to upstream version 30.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 25.0-10" date="1611662401">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 30.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 30.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 31.0.1-1" date="1634212800">- Update to 31.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31.0.1-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 31.0.1-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31.0.1-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="677e3cf87471208fb73d4c4fae2f617ce3cddb4a6bd1e866d5bea1daa6f96f9d" name="guava-javadoc" arch="noarch">
  <version epoch="0" ver="31.0.1" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 31.0.1-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31.0.1-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.0.1-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="2a0940e3aeb3ac81dd9517098a0021371b5cdea279f7c24145e4f675293a487c" name="guava-javadoc" arch="noarch">
  <version epoch="0" ver="33.3.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 32.1.3-1" date="1700568000">- Update to upstream version 32.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 32.1.3-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 32.1.3-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 33.2.1-1" date="1721131200">- Update to upstream version 33.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 33.2.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33.3.0-1" date="1724241600">- Update to upstream version 33.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33.3.0-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="9936ac22d1cb2292cb309c32902dec4f3ba74bd9122431a889b43f16a9f4a65f" name="guava-javadoc" arch="noarch">
  <version epoch="0" ver="33.3.0" rel="5.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 32.1.3-1" date="1700568000">- Update to upstream version 32.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 32.1.3-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 32.1.3-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 33.2.1-1" date="1721131200">- Update to upstream version 33.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 33.2.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33.3.0-1" date="1724241600">- Update to upstream version 33.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33.3.0-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="dda74145ec85c31b2d0e51d4abed59fb9a3df8eaf91aabafbe867855cfb3ef0e" name="guava-testlib" arch="noarch">
  <version epoch="0" ver="30.1" rel="10.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 30.1-6" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 30.1-7" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 30.1-8" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 30.1-9" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 30.1-10" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="a55169053554bac80408cbb987e9349a75e9e9bfa335c3fd1446f4f8fde02d4a" name="guava-testlib" arch="noarch">
  <version epoch="0" ver="31.0.1" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 25.0-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 29.0-1" date="1600430400">- Update to upstream version 29.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 30.1-1" date="1611662400">- Update to upstream version 30.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 25.0-10" date="1611662401">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 30.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 30.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 31.0.1-1" date="1634212800">- Update to 31.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31.0.1-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 31.0.1-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31.0.1-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="501f5edd0a4f1eeca48386167d42f89a6c3f046f5ea6d311d54ac8bc2b36b056" name="guava-testlib" arch="noarch">
  <version epoch="0" ver="31.0.1" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 31.0.1-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 31.0.1-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.0.1-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="901a1cb1d2496eafb3024a1141eadf837f704713bc1d11dbeccace72584cee1f" name="guava-testlib" arch="noarch">
  <version epoch="0" ver="33.3.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 32.1.3-1" date="1700568000">- Update to upstream version 32.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 32.1.3-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 32.1.3-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 33.2.1-1" date="1721131200">- Update to upstream version 33.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 33.2.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33.3.0-1" date="1724241600">- Update to upstream version 33.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33.3.0-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="35da86592debc3c88b794c896f45e46814887c68964c7e0f445ad4cc84fb37b9" name="guava-testlib" arch="noarch">
  <version epoch="0" ver="33.3.0" rel="5.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 31.1-8" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 32.1.3-1" date="1700568000">- Update to upstream version 32.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 32.1.3-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 32.1.3-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 32.1.3-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 33.2.1-1" date="1721131200">- Update to upstream version 33.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 33.2.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33.3.0-1" date="1724241600">- Update to upstream version 33.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 33.3.0-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="78ef2fbe6f8da4b5cd24c459f34e3489c4094147e55fd243b8e71104587c28b7" name="guestfs-tools-bash-completion" arch="noarch">
  <version epoch="0" ver="1.52.2" rel="6.el9.alma.1"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.51.6-2" date="1705665600">- Rebase to guestfs-tools 1.51.6
- Implement --key all:...
  resolves: RHEL-19030
- Fix crash because of off-by-one error
  resolves: RHEL-19062
- Fix virt-customize --chown invalid format
  resolves: RHEL-21899</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.51.6-4" date="1715860800">- Add support for nbd+unix:// URIs
  resolves: RHEL-33956
- customize: Implement --inject-blnsvr operation
  resolves: RHEL-36634</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.51.6-5" date="1724760000">- Reboot Windows between each firstboot script to improve reliability
  resolves: RHEL-55759</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-2" date="1730289600">- Rebase to guestfs-tools 1.52.2
  resolves: RHEL-56811
- Replace Jansson with json-c
  resolves: RHEL-65294</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-3" date="1740484800">- Fix virt-drivers fails on opensuse guest if kernel-source is installed
  resolves: RHEL-80214</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-4" date="1741867200">- mlcustomize: Remove dnf --verbose option
  resolves: RHEL-83200</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-5" date="1749556800">- builder: Update link to templates to use https
  resolves: RHEL-94874</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-6" date="1755259200">- Update guestfs-tools firstboot.bat to match virt-v2v
  resolves: RHEL-109521</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1.52.2-6.alma.1" date="1757937600">- Enable building for ppc64le</changelog>
</package>
<package pkgid="df1edb88d2ebc41ca3da7ea1aa9c2d7de5a0a1d845e25df349febbdbed77d014" name="guestfs-tools-man-pages-ja" arch="noarch">
  <version epoch="0" ver="1.52.2" rel="6.el9.alma.1"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.51.6-2" date="1705665600">- Rebase to guestfs-tools 1.51.6
- Implement --key all:...
  resolves: RHEL-19030
- Fix crash because of off-by-one error
  resolves: RHEL-19062
- Fix virt-customize --chown invalid format
  resolves: RHEL-21899</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.51.6-4" date="1715860800">- Add support for nbd+unix:// URIs
  resolves: RHEL-33956
- customize: Implement --inject-blnsvr operation
  resolves: RHEL-36634</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.51.6-5" date="1724760000">- Reboot Windows between each firstboot script to improve reliability
  resolves: RHEL-55759</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-2" date="1730289600">- Rebase to guestfs-tools 1.52.2
  resolves: RHEL-56811
- Replace Jansson with json-c
  resolves: RHEL-65294</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-3" date="1740484800">- Fix virt-drivers fails on opensuse guest if kernel-source is installed
  resolves: RHEL-80214</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-4" date="1741867200">- mlcustomize: Remove dnf --verbose option
  resolves: RHEL-83200</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-5" date="1749556800">- builder: Update link to templates to use https
  resolves: RHEL-94874</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-6" date="1755259200">- Update guestfs-tools firstboot.bat to match virt-v2v
  resolves: RHEL-109521</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1.52.2-6.alma.1" date="1757937600">- Enable building for ppc64le</changelog>
</package>
<package pkgid="cda50ccc97cf98a33bd2af58fef85cee9333a95d33c46364a0af8e07a86cba43" name="guestfs-tools-man-pages-uk" arch="noarch">
  <version epoch="0" ver="1.52.2" rel="6.el9.alma.1"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.51.6-2" date="1705665600">- Rebase to guestfs-tools 1.51.6
- Implement --key all:...
  resolves: RHEL-19030
- Fix crash because of off-by-one error
  resolves: RHEL-19062
- Fix virt-customize --chown invalid format
  resolves: RHEL-21899</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.51.6-4" date="1715860800">- Add support for nbd+unix:// URIs
  resolves: RHEL-33956
- customize: Implement --inject-blnsvr operation
  resolves: RHEL-36634</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.51.6-5" date="1724760000">- Reboot Windows between each firstboot script to improve reliability
  resolves: RHEL-55759</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-2" date="1730289600">- Rebase to guestfs-tools 1.52.2
  resolves: RHEL-56811
- Replace Jansson with json-c
  resolves: RHEL-65294</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-3" date="1740484800">- Fix virt-drivers fails on opensuse guest if kernel-source is installed
  resolves: RHEL-80214</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-4" date="1741867200">- mlcustomize: Remove dnf --verbose option
  resolves: RHEL-83200</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-5" date="1749556800">- builder: Update link to templates to use https
  resolves: RHEL-94874</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.52.2-6" date="1755259200">- Update guestfs-tools firstboot.bat to match virt-v2v
  resolves: RHEL-109521</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1.52.2-6.alma.1" date="1757937600">- Enable building for ppc64le</changelog>
</package>
<package pkgid="d0bce67a616d4a46b7e6c540c00528e64e52f21021ecb07944209cb806e79e4a" name="guice-assistedinject" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="10.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-10" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="8660e90215578cb02c6d947483d7644447520fdb3d60cee32be1c23062ba2c13" name="guice-assistedinject" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="a6f61d0048f0b06a98e3450a4fa7ffbb2535f941092ba87ec5f8a54cb5dda3a9" name="guice-assistedinject" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="704b41a02cfffb14bb8a7def2b0c16d2a927a174d567d44f5460f039051777e4" name="guice-assistedinject" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="453e03979f6036a77b84c815e481de76b93bd533d7ff0652711c01727d378b46" name="guice-assistedinject" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="17ff38dab485995e52db0f30d5be0efcc173746da6c4ef718f4fbd8d6e1026de" name="guice-bom" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="10.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-10" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="73ee1e3d79cf301089744a8813bce1d43942656b33fd624a868f892d268c9a4a" name="guice-bom" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="733cd8bc72ed8c4c36122ecd6e7555f4abcc9c8897fbd42b370ba3c4ee3928f2" name="guice-bom" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="f40c931843782aeb65ab844fa9fc192b4e03e478ff97a7a38d7e2cfe00e65123" name="guice-bom" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c6235d94b83c45810c0fca2a174e51af953e65e5c5ae112fe8f6c38b72a7eebe" name="guice-bom" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e7383b1ffd86371a7dae7b6dae8090ab3308cca21cdec0b55b2f19269b480996" name="guice-extensions" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="10.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-10" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="e9ce973b4c9352476ea6b11ae157925cf9df0cfe44521b8645bd765c23d4e2dd" name="guice-extensions" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="ad25a2982623a9115a4852cc885cc9047312f9b7912018b9faaa3b705a7b472e" name="guice-extensions" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="28c96f2c3b06357216fe5a8e6f241a4c7687cd1a372b5f2d8a28239a2b34f374" name="guice-extensions" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="f20fc43988bdd9df032502d33564567d756b386414e24c9b59b881613222efc5" name="guice-extensions" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c48288898e236da234e2ffd72840acde6125402bb796eeb1b8bae0164819d865" name="guice-grapher" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="10.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-10" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="c74d9654232962b40335a815914bf49142d28b9c050f4440a8e7073e83e82a67" name="guice-grapher" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="3c66c30c26cde5ea46c8560063a169ee3a103084fb96e391c6496ca2e6ba0fff" name="guice-grapher" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="22220904ea453301d54c4d0bcf73c68d9aa19cc0a7a7919f03a82af54df7aee1" name="guice-grapher" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="71acaba814cceeeaa7600a2f8c304414fbf8228d9d7819379b2b6a225fd99c8f" name="guice-grapher" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="f3ceea1c94bc547e17749b32a72394c31a589de70a4bb03f1abb1e4cfc14c3db" name="guice-jmx" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="10.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-10" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="f237b589085355874dfb2252bb8e970c99bc60e828dca2b4d091b594e31f3313" name="guice-jmx" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="e682c58d2e6870301f1745021aece3fbf582b55dd9adc12fc4ab535ed0ba6426" name="guice-jmx" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a43f5b3f417745c25e5b43a441a37ca6c9ea6b9c65be9df5ea87515e95c2aba7" name="guice-jmx" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="228f467eceb6a46ba19faf7c68e4f3ce1bba56513f1a29952facbf3a0a2d2ba7" name="guice-jmx" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="23e54b82903335b4d3971456c31d0982abd1b5f997627476e711d740d005ff01" name="guice-jndi" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="10.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-10" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="542211ce703639eb417833142d0b7235e051c782abc3e5b0e9c6252603b13fa2" name="guice-jndi" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="c551fc7b7c9f4179104820ea703902f5c4b85d531b5ae94ffe65cbc0b3ecf77a" name="guice-jndi" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="9be43623231076806f7f97ca464f02d07256b6cf35689d201b940f78905f483b" name="guice-jndi" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="7371f62af6f7323b5f42c120b6fdbdef1d8e2bacdf0603853d53f3cbfc96bc3b" name="guice-jndi" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="a0d4ae3137895ac869dde921654938ed7a1304215d26a2052a9b4fd4c2dc1fe7" name="guice-multibindings" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="10.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-10" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="f3486159f8dc0b8f73bee71da3fc3123932a5336a0a58008235c58326d7617db" name="guice-multibindings" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="a736de80f93762a13912fc9967281ab31e056330ffe6d89cd0a719f3f6730a5d" name="guice-multibindings" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a44c67f8c6a37829ec964ed53bd64aca9779a19963f7aff1f5e7f3dd0c816a3d" name="guice-parent" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="10.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-10" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="2aebca881a8d61dbec9f8769ca28d0bbb36fd3a03e6d56745ada2858086e5edd" name="guice-parent" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="31a7e8aadd84f47ab50c18b585ace1dc06b90e0b726654c53861bf5f90f620a0" name="guice-parent" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="22cf58754181eff3712ee52641b6ac31f0e2506fd785952593dd8a4c3b77e72a" name="guice-parent" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="9b1b27e01fb79f6f5ddcba97581b3ae0f5d599d74135900acfdd80738c34f51c" name="guice-parent" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="5f07816de504c6d3074e48d9686e6e69baf9e517cfea848863602154463bf5bd" name="guice-servlet" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="10.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-10" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="0a81f11649885c850a0ac977d53aeed5aff5d339c610f9c7cf943235c5ded866" name="guice-servlet" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="aa5b723fa9ce6c11b52c72c3a7a622492f3a12137e00abefac344df1639f351d" name="guice-servlet" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="16929576b9f69f1a4c54e1eff76197739ed55c7f0a4506236554cb0c05fd779a" name="guice-servlet" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="73fabc30a3f2a3ae3838c93bc381669767a81274f2cc59ae07169cf54b921406" name="guice-servlet" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="ca64b8714dbdaa39af90cf5da2a849738f6ed1c7a8e58f17d4e02e0dc178ee1e" name="guice-throwingproviders" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="10.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-10" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="d31cbfdfdc5c93f12949a33064a8651e1c73744b41d543f5b8b4ce6c5c1dd4cb" name="guice-throwingproviders" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-9" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-11" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.2.3-12" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="b8f92ce0d8e888bc5c4f1d9955ba552f49a91958d73bb889f727cb776383f904" name="guice-throwingproviders" arch="noarch">
  <version epoch="0" ver="4.2.3" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.3-1" date="1600430400">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.3-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="1100ba53ab6d970933646005b29e8dd60628174c3cbaf676063fc5f53cb65e73" name="guice-throwingproviders" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="358c5504ca1525edb44745a23e854f268dfd1706ed5783206cd094118a19a5b7" name="guice-throwingproviders" arch="noarch">
  <version epoch="0" ver="5.1.0" rel="23.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-5" date="1693396800">- Build with Jurand instead of deprecated javapackages-extra</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-8" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-9" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-10" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.0-12" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-13" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.0-20" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="ddafcac61d2f889cb7c8c758aa8291412f56db9645ebb41bce56cb9220103808" name="gutenprint-devel" arch="aarch64">
  <version epoch="0" ver="5.3.4" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.3-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 5.3.3-3" date="1585137600">- Fix warning building with clang
- non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.3-5" date="1601467200">- dont require the gimp package as build require, pkgconfig's gimpui-2.0 suffices</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.3-6" date="1604577600">- make is no longer in buildroot by default</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.3-7" date="1604664000">- 1773690 - cups-genppdupdate doesnt work for non-utf-8 PPDs</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-1" date="1610539200">- 5.3.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.3.4-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.3.4-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b5c511253eb8b25bb8bd33a81290df13f6836da246cbbda507f18fc324fac859" name="gutenprint-libs-ui" arch="aarch64">
  <version epoch="0" ver="5.3.4" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.3-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 5.3.3-3" date="1585137600">- Fix warning building with clang
- non-void function 'stp_paths_copy_with_prefix' should return a value [-Wreturn-type]</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.3-5" date="1601467200">- dont require the gimp package as build require, pkgconfig's gimpui-2.0 suffices</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.3-6" date="1604577600">- make is no longer in buildroot by default</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.3-7" date="1604664000">- 1773690 - cups-genppdupdate doesnt work for non-utf-8 PPDs</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 5.3.4-1" date="1610539200">- 5.3.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.3.4-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.3.4-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.3.4-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6e58da34bce4d9e9d595bf2b9405248bf00a000f4d354dc37968f7cb2e4b5817" name="gvfs-tests" arch="aarch64">
  <version epoch="0" ver="1.48.1" rel="8.el9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.48.1-5" date="1727352000">- Add support for x-gvfs-trash mount option (RHEL-52353)</changelog>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.48.1-6" date="1739448000">- Add edit mode support for smb backend (RHEL-71088)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.48.1-7" date="1769428800">- udisks2: Use hash table for quicker lookups in the monitor (RHEL-143934)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 1.48.1-8" date="1770379200">- udisks2: Correct add to hash table for items which can clash in the monitor (RHEL-143934)</changelog>
</package>
<package pkgid="8d66aff4a48016663b854c3498ebdbfad7a381090c155a7ca7bd889a7086fd2a" name="gvnc-tools" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="2.el9"/>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 1.3.0-2" date="1705924800">- Rebuild to trigger shipping devel package (RHEL-19019)</changelog>
</package>
<package pkgid="576b93c4a918a47d176abbe8051746df9e7403b41b4e6b7811fb88795e63f2b1" name="gvncpulse" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="2.el9"/>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 1.3.0-2" date="1705924800">- Rebuild to trigger shipping devel package (RHEL-19019)</changelog>
</package>
<package pkgid="bc8b087d5475ea6af050447319f0c1eacc28a790279c0043f1366f8bda16578b" name="gvncpulse-devel" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="2.el9"/>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 1.3.0-2" date="1705924800">- Rebuild to trigger shipping devel package (RHEL-19019)</changelog>
</package>
<package pkgid="99cc3025e4628465eb540f7eb14396977a74efd2b581ef27c7be77768bc75e04" name="hamcrest" arch="noarch">
  <version epoch="0" ver="2.2" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.3-30" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.3-31" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2-4" date="1622548800">- Obsolete hamcrest-core and -demo
- Resolves: rhbz#1966269</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-5" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-8" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a0fd2534014fa267831dc8b383942d0e569a71a96ed315109d2992ef91a43d9c" name="hamcrest" arch="noarch">
  <version epoch="0" ver="3.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2-12" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-13" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-14" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-15" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-16" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2-17" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-18" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0-1" date="1724414400">- Update to upstream version 3.0
- Resolves: rhbz#2307508</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="31cc72b020f6f7152532f6e0d25174a137b9d9692b247b5ca5e23ceac3f0404d" name="hamcrest-javadoc" arch="noarch">
  <version epoch="0" ver="2.2" rel="11.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.2-8" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.2-9" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.2-10" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.2-11" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="f91bdb74d7b6a1250b45dbf58ca12fb5eeda90a930a53661b714b4fb3e5e285a" name="hamcrest-javadoc" arch="noarch">
  <version epoch="0" ver="2.2" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.3-30" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.3-31" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2-4" date="1622548800">- Obsolete hamcrest-core and -demo
- Resolves: rhbz#1966269</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-5" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-8" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="6d329fcf3cfef354a241d28b39a8dccbbdd21b666b8fb7f7938fb0ce4482deb5" name="hamcrest-javadoc" arch="noarch">
  <version epoch="0" ver="3.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2-12" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-13" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-14" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-15" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2-16" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2-17" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-18" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0-1" date="1724414400">- Update to upstream version 3.0
- Resolves: rhbz#2307508</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="461170d14d10d1157a9971025163d1370183da2627f8254e2ceb0678b942d75a" name="hexchat" arch="aarch64">
  <version epoch="0" ver="2.16.1" rel="1.el9"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 2.16.0-1" date="1639396800">- Update to 2.16.0
Resolves: #1965883</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 2.16.0-2" date="1688990400">- Unbreak notification icon
Resolves: #2051561</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 2.16.1-1" date="1695902400">- Update to 2.16.1
Resolves: RHEL-766</changelog>
</package>
<package pkgid="1212eb6e17c7fae4204525eb0f20e2ca54d2e88d371b363427f2436ffa5d2e6c" name="hexchat-devel" arch="aarch64">
  <version epoch="0" ver="2.16.1" rel="1.el9"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 2.16.0-1" date="1639396800">- Update to 2.16.0
Resolves: #1965883</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 2.16.0-2" date="1688990400">- Unbreak notification icon
Resolves: #2051561</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 2.16.1-1" date="1695902400">- Update to 2.16.1
Resolves: RHEL-766</changelog>
</package>
<package pkgid="04519b68c5dd7e650db9ba695a44dd34bfbbfd1b50a15fe88dab2478735bee01" name="hidapi" arch="aarch64">
  <version epoch="0" ver="0.12.0" rel="2.el9"/>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.10.0-1" date="1603713600">- Update to new upstream release 0.10.0 (#1891375)</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.10.1-1" date="1606271162">- Update to new upstream release 0.10.1 (#1901388)
- Remove BR on gcc-c++ (no longer needed)</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.10.1-2" date="1609462581">- Fix FTBFS with autoconf 2.70</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.11.0-1" date="1633348800">- Update to new upstream release 0.11.0 (#2008570)</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.11.2-1" date="1641211200">- Update to new upstream release 0.11.2 (#2036738)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.2-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.12.0-1" date="1655380800">- Update to new upstream release 0.12.0 (#2081598)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e47c7589192035a901525ee272af137fb2ea53774345e262e9f37f98573f76f1" name="hidapi-devel" arch="aarch64">
  <version epoch="0" ver="0.12.0" rel="2.el9"/>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.10.0-1" date="1603713600">- Update to new upstream release 0.10.0 (#1891375)</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.10.1-1" date="1606271162">- Update to new upstream release 0.10.1 (#1901388)
- Remove BR on gcc-c++ (no longer needed)</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.10.1-2" date="1609462581">- Fix FTBFS with autoconf 2.70</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.1-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.11.0-1" date="1633348800">- Update to new upstream release 0.11.0 (#2008570)</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.11.2-1" date="1641211200">- Update to new upstream release 0.11.2 (#2036738)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11.2-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Scott Talbert &lt;swt@techie.net&gt; - 0.12.0-1" date="1655380800">- Update to new upstream release 0.12.0 (#2081598)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="6c7fef724da412d79c6b3593174065e3c8016e7c971f9460c5bee9594e59e5b2" name="highlight-gui" arch="aarch64">
  <version epoch="0" ver="3.60" rel="5.el9"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 3.54-1" date="1579521600">- Update to 3.54</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.54-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 3.56-1" date="1587988800">- Update to 3.56</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.56-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 3.57-1" date="1598097600">- Update to 3.57</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 3.60-1" date="1609329600">- Update to 3.60</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 3.60-2" date="1610020800">- Rebuilt for make macro change</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.60-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.60-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.60-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d10b9d02f9a2663de2909318155a3629b56b7c0eeb2cc40416522be9c69ee2c7" name="hostapd-logwatch" arch="aarch64">
  <version epoch="0" ver="2.11" rel="2.el9"/>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 2.11-1" date="1733227200">- Update to version 2.11</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 2.11-2" date="1739448000">- Enable CONFIG_IEEE80211BE
  Resolves: RHEL-58726</changelog>
</package>
<package pkgid="3dac072b3d19a404fece9052d1797e44e4617c4cd24e1316c5bcab4f06a56232" name="hspell-devel" arch="aarch64">
  <version epoch="0" ver="1.4" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.4-10" date="1585224000">- Add perl dependencies needed for build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.4-14" date="1621598400">- Resolves:rhbz#1961995 - Add gating tests from rhel-8</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="388443257373cb0ac2e7a9ce190e78a8730e9fac62ff75c5d5bd5194517c8dd8" name="httpcomponents-client" arch="noarch">
  <version epoch="0" ver="4.5.13" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.10-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.10-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 4.5.10-6" date="1613563200">- Build with -release 8 for better OpenJDK 8 compatibility.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.11-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.5.13-1" date="1624449600">- Update to upstream version 4.5.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.13-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.13-3" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.5.13-4" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.13-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e19b33f5c43d5dda07d62ffa15b52d35dfb451f7944c7949053312e96edff09e" name="httpcomponents-client" arch="noarch">
  <version epoch="0" ver="4.5.14" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-1" date="1692187200">- Update to upstream version 4.5.14</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.5.14-4" date="1702382400">- Port to Mockito 5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.5.14-7" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.5.14-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-9" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-18" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="950aa21e90a6bc8b65193ab91091d6dae520432d05f3d242df51df8c73e49343" name="httpcomponents-client-javadoc" arch="noarch">
  <version epoch="0" ver="4.5.13" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.10-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.10-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 4.5.10-6" date="1613563200">- Build with -release 8 for better OpenJDK 8 compatibility.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.11-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.5.13-1" date="1624449600">- Update to upstream version 4.5.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.13-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.13-3" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.5.13-4" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.13-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="c244c413eee63879138550f338549c7be3f6567720f25b1961c4b384e4fa67e8" name="httpcomponents-client-javadoc" arch="noarch">
  <version epoch="0" ver="4.5.13" rel="6.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.5.13-4" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.13-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.13-6" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="97e5160a3694576ede173f511824d8b0cebc76a4a65fb05fbc5edf2061fc81a8" name="httpcomponents-client-javadoc" arch="noarch">
  <version epoch="0" ver="4.5.13" rel="7.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.13-3" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.5.13-4" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.5.13-5" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.5.13-6" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.5.13-7" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="c9ff727a8a0bd8e05e69b769fa29ff9473f17558a332e93cf5d6bb30cd0d3319" name="httpcomponents-client-javadoc" arch="noarch">
  <version epoch="0" ver="4.5.14" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-1" date="1692187200">- Update to upstream version 4.5.14</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.5.14-4" date="1702382400">- Port to Mockito 5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.5.14-7" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.5.14-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-9" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-18" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b04321fd23aa35a97985ac69b59356d8fa7dea34539a5dcdbe222816fe5ee620" name="httpcomponents-client-javadoc" arch="noarch">
  <version epoch="0" ver="4.5.14" rel="21.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-1" date="1692187200">- Update to upstream version 4.5.14</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.5.14-4" date="1702382400">- Port to Mockito 5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.5.14-7" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.5.14-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.5.14-9" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.5.14-18" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e5bb4e988e7891790e92bc62a324e32bc2976dfceb59c4d484efcd77f2120aba" name="httpcomponents-core" arch="noarch">
  <version epoch="0" ver="4.4.13" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.12-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.12-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.13-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.13-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.13-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.4.13-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.13-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="88d244dec90add6dfd84e69565294808967e2e1480972f82ac65e95367ad6273" name="httpcomponents-core" arch="noarch">
  <version epoch="0" ver="4.4.16" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.4.16-4" date="1702382400">- Port to Mockito 5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.4.16-7" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.4.16-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-9" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-17" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-18" date="1733832000">- Disable tests failing without networking</changelog>
</package>
<package pkgid="0a9166a3e9e3ba61ccf59a5757a75347b2ed65acf50598606dc9494c006af7b6" name="httpcomponents-core-javadoc" arch="noarch">
  <version epoch="0" ver="4.4.13" rel="11.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.13-7" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.4.13-8" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.4.13-9" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.4.13-10" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.4.13-11" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="30096f6e9e7cebc08656a47428836dc67ede545f0b5dbeffc0e6d9a731a33130" name="httpcomponents-core-javadoc" arch="noarch">
  <version epoch="0" ver="4.4.13" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.12-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.12-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.13-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.13-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.13-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.4.13-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.13-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="abeefdbc8b1f81f988b3e185a774da5f6f5715bb93f0467f5ac08e13e108edea" name="httpcomponents-core-javadoc" arch="noarch">
  <version epoch="0" ver="4.4.13" rel="8.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.4.13-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.13-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.13-8" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="88007ac71a32fcea139b26451aca665e12997b51e16a503b32c0655319ef0768" name="httpcomponents-core-javadoc" arch="noarch">
  <version epoch="0" ver="4.4.16" rel="21.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.4.16-4" date="1702382400">- Port to Mockito 5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.4.16-7" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.4.16-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-9" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-17" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-18" date="1733832000">- Disable tests failing without networking</changelog>
</package>
<package pkgid="b34a493d9a5ffdc30fb1b371deee2be203d685f5e670ba93b7e457276e4d8a6c" name="httpcomponents-core-javadoc" arch="noarch">
  <version epoch="0" ver="4.4.16" rel="21.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.4.16-4" date="1702382400">- Port to Mockito 5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.4.16-7" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.4.16-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.4.16-9" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-17" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.4.16-18" date="1733832000">- Disable tests failing without networking</changelog>
</package>
<package pkgid="621399ef1a3c791916389a41a16ea33610f1ab85867f70324370d1afe51f85a7" name="httpcomponents-project" arch="noarch">
  <version epoch="0" ver="12" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 11-4" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 12-1" date="1600430400">- Update to upstream version 12</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 12-1" date="1603540800">- Update to version 12.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 12-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 12-4" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 12-5" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 12-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="15b4e04967cd0d1af93aa07eebca8e31389140511844c292983a28dd23200b06" name="httpcomponents-project" arch="noarch">
  <version epoch="0" ver="12" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 12-1" date="1600430400">- Update to upstream version 12</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 12-1" date="1603540800">- Update to version 12.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 12-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 12-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="04f326701960ef8068467d1bdf56783fc33f2df648fb85e99e6cd33193c1ec44" name="httpcomponents-project" arch="noarch">
  <version epoch="0" ver="13" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 13-1" date="1692187200">- Update to upstream version 13</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 13-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 13-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 13-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 13-14" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 13-15" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="cf5b2fa601cec161f7147bb019139be129ef9f57ba098caa74aa33abc82e0e14" name="hwloc-plugins" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="6.el9_7"/>
  <changelog author="Dan Hor&#xE1;k &lt;dhorak@redhat.com&gt; - 2.4.1-6" date="1760529600">- linux: fix support for NUMA node0 being offline (RHEL-118677)
- Resolves: RHEL-118677</changelog>
</package>
<package pkgid="293e9d3aace971b3d446bef6b628e93d93c60af7caa435a47701dc2c223e4228" name="ibus-anthy-devel" arch="aarch64">
  <version epoch="0" ver="1.5.13" rel="4.el9_4"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.13-2" date="1709812800">- Distinguish Super-space and space shortcut keys. Related: RHEL-24804</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.13-3" date="1710158400">- Bump for el9_4. Related: RHEL-24804</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.13-4" date="1710158401">- Fix CI. Related: RHEL-24804</changelog>
</package>
<package pkgid="5a3a383c6290f792763c3e723b060ed35ebe077f7284b0ab9235a71c1034d533" name="ibus-anthy-tests" arch="aarch64">
  <version epoch="0" ver="1.5.13" rel="4.el9_4"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.13-2" date="1709812800">- Distinguish Super-space and space shortcut keys. Related: RHEL-24804</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.13-3" date="1710158400">- Bump for el9_4. Related: RHEL-24804</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.13-4" date="1710158401">- Fix CI. Related: RHEL-24804</changelog>
</package>
<package pkgid="06875ad54fe632bf227bc28f91d2c3ed023d9f114a1193411d57e8829791ff3b" name="ibus-desktop-testing" arch="noarch">
  <version epoch="0" ver="1.5.25" rel="6.el9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.25-3" date="1698148800">- Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.25-4" date="1698667200">- Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.25-5" date="1700049600">- Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.25-6" date="1722340800">- Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB</changelog>
</package>
<package pkgid="58ea6d0d7545429f77439c89e50d1dc7319b31792ecd346b36c73cbb69fdac41" name="ibus-hangul-tests" arch="aarch64">
  <version epoch="0" ver="1.5.4" rel="9.el9"/>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.5.4-8" date="1700136000">- Add ibus-hangul-sync-process-key.patch
- Resolves: RHEL-14878</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.5.4-9" date="1700740800">- Fix CI tests
- Resolves: RHEL-14878</changelog>
</package>
<package pkgid="c23a3422a8aa2b107e32ce9d882e72931db2801985665752aa0174427fa6b779" name="ibus-table-chinese-cantonyale" arch="noarch">
  <version epoch="0" ver="1.8.3" rel="10.el9"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.3-1" date="1594296000">- Update to 1.8.3
- Turned cangjie 3 and 5's DYNAMIC_ADJUST to FALSE
  Resolves: https://github.com/definite/ibus-table-chinese/pull/14
- Add SUGGESTION_MODE = TRUE to the wubi tables
  Resolves: https://github.com/definite/ibus-table-chinese/pull/15
- Support pinyin mode also for stroke5 table
  Resolves: https://github.com/definite/ibus-table-chinese/pull/12
- Use nicer values for symbol and status prompt
  Resolves: https://github.com/definite/ibus-table-chinese/pull/8
- update jyutping table; add cantonyale table
  Resolves: https://github.com/definite/ibus-table-chinese/pull/11
- Update jyutping and cantonese tables
  Resolves: https://github.com/definite/ibus-table-chinese/pull/9</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.3-2" date="1594900800">- bump release number to force a rebuild with newer ibus-table &gt;= 1.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.3-5" date="1596110400">- Fix build on rawhide</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.3-6" date="1604404800">- Remove BuildRequirement of cmake-fedora</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.3-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.3-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.3-10" date="1643889600">- Don’t index the databases in the post install
- Resolves: rhbz#2047954</changelog>
</package>
<package pkgid="0941e579353f63afaa4ebc1e576f2951eee8b7e77b2b3e78c3d2eaaa6ac2c0ef" name="ibus-table-devel" arch="noarch">
  <version epoch="0" ver="1.12.5" rel="5.el9"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.4-1" date="1611489600">- Update to 1.12.4
- Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
  zh_CN is 100% complete now.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.4-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.4-3" date="1612267200">- Use standard library mock</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.4-4" date="1613476800">- Remove i3 from BuildRequires</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.4-5" date="1613563200">- Use “BuildRequires:  appstream” only on Fedora</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.5-1" date="1614945600">- Update to 1.12.5
- Return False in _execute_command_commit_candidate_number(self, number)
  if number out of range
- Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
- remove Use-from-unittest-import-mock-instead-of-just-import.patch
  (included upstream)
- Update translations from Weblate (New translation for Sinhala (si) started)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.12.5-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.5-3" date="1625054400">- Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
- Improve CI tests and add gating.yaml</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.5-4" date="1626436800">- Related: rhbz#1974631 Delete ibus write-cache in scriptlet</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.12.5-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ff8c32fc5b23ecf7dc94457b3d9be48afd01b0211dea4dd3df582fdeb97cb230" name="ibus-table-tests" arch="noarch">
  <version epoch="0" ver="1.12.5" rel="5.el9"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.4-1" date="1611489600">- Update to 1.12.4
- Update translations from Weblate (updated es, cs, fa, pt_BR, zh_CN).
  zh_CN is 100% complete now.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.4-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.4-3" date="1612267200">- Use standard library mock</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.4-4" date="1613476800">- Remove i3 from BuildRequires</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.4-5" date="1613563200">- Use “BuildRequires:  appstream” only on Fedora</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.5-1" date="1614945600">- Update to 1.12.5
- Return False in _execute_command_commit_candidate_number(self, number)
  if number out of range
- Resolves: https://github.com/moebiuscurve/ibus-table-others/issues/21
- remove Use-from-unittest-import-mock-instead-of-just-import.patch
  (included upstream)
- Update translations from Weblate (New translation for Sinhala (si) started)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.12.5-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.5-3" date="1625054400">- Resolves: rhbz#1974631 Delete ibus write-cache in scriptlet
- Improve CI tests and add gating.yaml</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.12.5-4" date="1626436800">- Related: rhbz#1974631 Delete ibus write-cache in scriptlet</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.12.5-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="01aa938fd4310fbbd70d1c903cc2f0f761e9cf03423f5565740f53c258a0bbc9" name="ibus-tests" arch="aarch64">
  <version epoch="0" ver="1.5.25" rel="6.el9"/>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.25-3" date="1698148800">- Resolves: RHEL-1616 Space, back-spc, enter key not working on gtk4</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.25-4" date="1698667200">- Resolves: RHEL-1616 Make ibus-tests to depend on ibus-libs</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.25-5" date="1700049600">- Resolves: RHEL-1616 Fix RESOURCE_LEAK in OpenScanHub</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.5.25-6" date="1722340800">- Resolves: RHEL-39398 ship ibus-gtk4 in RHEL 9 CRB</changelog>
</package>
<package pkgid="cb5c5c35ba7fc9a9d24eebc28742b7ea09b588cb867040dc49d3d52840124ba8" name="ibus-typing-booster-tests" arch="noarch">
  <version epoch="0" ver="2.11.0" rel="5.el9"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.10.4-1" date="1612267200">- Update to 2.10.4
- Use “from unittest import mock” instead of just “import mock”.
- Update emoji annotations from CLDR
- Translation update from Weblate for zh_CN (still 100% complete)</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.10.4-2" date="1613563200">- Use “BuildRequires:  appstream” only on Fedora</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.10.5-1" date="1613563201">- Update to 2.10.5
- Run the voikko tests only for libvoikko version &gt;= 4.3
- Adapt voikko test cases to the newest voikko version
  libvoikko-4.3-3, python3-libvoikko-4.3-3, voikko-fi-2.4-3
- Log a warning when language is “fi” and “import libvoikko” failed
- Return an empty list [] in spellcheck_suggest_voikko() when libvoikko was not imported
- Update emoji annotations from CLDR, switching “no” and “nb”
  See: https://unicode-org.atlassian.net/browse/CLDR-2698
- Remove icon in emoji-picker.appdata.xml (to avoid warnings
  from appstream-util and appstreamcli).</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.10.5-2" date="1613736000">- Use the voikko build requires only for Fedora. They are only
  needed to run the voikko test cases during build.</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.10.5-3" date="1613995200">- Remove gnome-desktop-testing and ibus-desktop-testing from the requires
  of the ibus-typing-booster-tests subpackage</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.11.0-1" date="1615464000">- Update to 2.11.0
- Use sensitivity feature of buttons in the setup tool tab where shortcuts are defined
- Don’t let dialog action area of setup tool expand.
- Improve the setup tool to make it possible to enter multi-line expansions of shortcuts
- Resolves https://github.com/mike-fabian/ibus-typing-booster/issues/158
- Elide extremely long candidates in the lookup table in the middle.
- If a candidate contains newlines, replace the newlines with arrows in the lookup table.
- If a commit string contains new-lines, commit it in several chunks
  and forward Return between the chunks.
- Update emoji annotations from CLDR
- Put the remote icon back in emoji-picker.appdata.xml, it was a
  false positive by appstreamcli
- Translation update from Weblate (pt_PT updated, 100% complete now)
- Skip the inscript2 test cases if these transliterations are not available.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.11.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.11.0-3" date="1625054400">- Resolves: rhbz#1974636 Delete ibus write-cache in scriptlet
- Improve CI tests and add gating.yaml</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 2.11.0-4" date="1627387200">- Related: rhbz#1974636 Fix license tag</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.11.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1235fc9bff22fc7a91d3c0a29962ffbd4b3cb8fb9ba2cc480cb8be96990809f6" name="idm-jss-javadoc" arch="aarch64">
  <version epoch="0" ver="5.7.0" rel="1.el9"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.1" date="1701864000">- Rebase to JSS 5.5.0-alpha3</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.2" date="1702296000">- Rebuild with side tag</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.3" date="1706529600">- Add Obsoletes/Conflicts for idm-tomcatjss</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.4" date="1706788800">- Rebuild with side tag</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-1" date="1708516800">- Rebase to JSS 5.5.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-0.1.alpha1" date="1733313600">- Rebase to JSS 5.6.0-alpha1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-1" date="1739448000">- Rebase to JSS 5.6.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.7.0-0.1.beta1" date="1751371200">- Rebase to JSS 5.7.0-beta1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.7.0-1" date="1754395200">- Rebase to JSS 5.7.0</changelog>
</package>
<package pkgid="49825368aad9cb134f927d3cf265c820c781464bd43f03ff93cfb92318c9c908" name="idm-jss-tests" arch="aarch64">
  <version epoch="0" ver="5.7.0" rel="1.el9"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.1" date="1701864000">- Rebase to JSS 5.5.0-alpha3</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.2" date="1702296000">- Rebuild with side tag</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.3" date="1706529600">- Add Obsoletes/Conflicts for idm-tomcatjss</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.4" date="1706788800">- Rebuild with side tag</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-1" date="1708516800">- Rebase to JSS 5.5.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-0.1.alpha1" date="1733313600">- Rebase to JSS 5.6.0-alpha1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-1" date="1739448000">- Rebase to JSS 5.6.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.7.0-0.1.beta1" date="1751371200">- Rebase to JSS 5.7.0-beta1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.7.0-1" date="1754395200">- Rebase to JSS 5.7.0</changelog>
</package>
<package pkgid="56c084dfa6a942e6da0c7e24d4f1d935e715dc532c280c5a20ad9bff61092304" name="idm-jss-tools" arch="aarch64">
  <version epoch="0" ver="5.7.0" rel="1.el9"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.1" date="1701864000">- Rebase to JSS 5.5.0-alpha3</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.2" date="1702296000">- Rebuild with side tag</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.3" date="1706529600">- Add Obsoletes/Conflicts for idm-tomcatjss</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.4" date="1706788800">- Rebuild with side tag</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-1" date="1708516800">- Rebase to JSS 5.5.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-0.1.alpha1" date="1733313600">- Rebase to JSS 5.6.0-alpha1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-1" date="1739448000">- Rebase to JSS 5.6.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.7.0-0.1.beta1" date="1751371200">- Rebase to JSS 5.7.0-beta1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.7.0-1" date="1754395200">- Rebase to JSS 5.7.0</changelog>
</package>
<package pkgid="a179ea619d4448ff19ced8691d05312e585f277aabde052fb10b715ea8db8e69" name="idm-ldapjdk-javadoc" arch="noarch">
  <version epoch="0" ver="5.6.0" rel="1.el9"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.4.0-1" date="1685966400">- Rebase to LDAP SDK 5.4.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-0.1.alpha4" date="1701950400">- Rebase to LDAP SDK 5.5.0-alpha4</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.5.0-1" date="1708516800">- Rebase to LDAP SDK 5.5.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-alpha1" date="1733313600">- Rebase to LDAP SDK 5.6.0-alpha1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 5.6.0-1" date="1739448000">- Rebase to LDAP SDK 5.6.0</changelog>
</package>
<package pkgid="d930e7bfda6c49f38f0cbc28b82fde290c7e3409f1ebbde243f6982d9dd53656" name="idm-pki" arch="aarch64">
  <version epoch="0" ver="11.7.1" rel="1.el9"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.5.0-1" date="1708516800">- Rebase to PKI 11.5.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.5.1-1" date="1718971200">- Rebase to PKI 11.5.1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-0.2.alpha2" date="1733313600">- Rebase to PKI 11.6.0-alpha2</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-1" date="1739448000">- Rebase to PKI 11.6.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-2" date="1739793600">- Use external runtime dependencies</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.6.0-3" date="1739793601">- Drop pki-est subpackage</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-0.1.beta1" date="1751371200">- Rebase to PKI 11.7.0-beta1</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.0-1" date="1754395200">- Rebase to PKI 11.7.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 11.7.1-1" date="1763380800">- Rebase to PKI 11.7.1</changelog>
</package>
<package pkgid="9269a0ffd9fc8627cac6d7da37d74428aa85451bbc2a68534fcba43707665863" name="iio-sensor-proxy-docs" arch="noarch">
  <version epoch="0" ver="3.3" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 2.8-1" date="1567598400">+ iio-sensor-proxy-2.8-1
- Update to 2.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.0-1" date="1584964800">+ iio-sensor-proxy-3.0-1
- Update to 3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.1-1" date="1623672000">+ iio-sensor-proxy-3.1-1
- Update to 3.1
- Resolves: rhbz#1971625</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.3-1" date="1629288000">+ iio-sensor-proxy-3.3-1
- Update to 3.3
- Resolves: rhbz#1993769</changelog>
</package>
<package pkgid="541382c081d003d4b9d9f1925fe6ded90965c73f795273e5607df3b73be69ebb" name="imaptest" arch="aarch64">
  <version epoch="0" ver="20210507" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190614-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190614-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 20200904-1" date="1604750400">- Upgrade to 20200904</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 20210116-1" date="1610971200">- Upgrade to 20210116 (#1916982)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20210116-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 20210305-1" date="1615032000">- Upgrade to 20210305 (#1935535)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20210305-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20210305-3" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Pavel Zhukov &lt;pzhukov@redhat.com&gt; - 20210507-1" date="1627560000">- Rebuild with new dovecot</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20210507-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="40621dcf320e77652411ac0a4191596fdc1ecc21edf74f5d23922eec3c2d0d22" name="ipa-python-compat" arch="noarch">
  <version epoch="0" ver="4.13.1" rel="3.el9_8.2"/>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-22" date="1756123200">- Resolves: RHEL-107483 ipa-ca-install fails on CA-less replica due to inadequate key usage in master certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-23" date="1758196800">- Related: RHEL-114548 Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-24" date="1759233600">- Resolves: RHEL-118448 CVE-2025-7493 ipa: Privilege escalation from host to domain admin in FreeIPA</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.12.2-25" date="1763553600">- Resolves: RHEL-128238 [RFE] Support storing LWCA private keys on an HSM [rhel-9]
- Resolves: RHEL-126515 RFE: Enable external password reset agents to use ipa_pwd_extop in RHEL IdM [rhel-9]
- Resolves: RHEL-73399 RFE: Update IdM password policy configurations to meet M-22-09 by restricting spaces and require number character class
- Resolves: RHEL-128241 ATTR_NAME_BY_OID is missing OID 2.5.4.97, organizationIdentifier [rhel-9]
- Resolves: RHEL-126514 [RFE] ipa-client-automount should have an option to include domain of the machine. [rhel-9]
- Resolves: RHEL-124171 Include latest fixes in python3-ipatests package 
- Resolves: RHEL-120514 Include fixes in python3-ipatests [rhel-9.8]
- Resolves: RHEL-118609 test_cacert_manage fails due to expired Let's Encrypt R3 certificate</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.0-1" date="1765281600">- Resolves: RHEL-134542 Add modern WebUI as submodule and enable routing in Apache 
- Resolves: RHEL-134540 Switch IPA to use the PKI python API directly rather than RPC calls
- Resolves: RHEL-134196 After upgrade from 9.7 to 9.8 ipactl restart fails to restart winbind service 
- Resolves: RHEL-132334 Include latest fixes in python3-ipatests package
- Resolves: RHEL-129224 Fix ipatests for kdcproxy after CVE-2025-59088 fix
- Resolves: RHEL-126974 Minor typo in ipa_idrange_fix.py
- Resolves: RHEL-120954 Rebase ipa to latest 4.13.x version for RHEL 9.8</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-1" date="1768564800">- Resolves: RHEL-141446 [RFE] Command that retrieve and install new CA certificates
- Resolves: RHEL-140584 Support replaceable WebUI artwork for RHEL and CentOS
- Resolves: RHEL-141297 Memory leaks in IPA plugins
- Resolves: RHEL-141054 IPA fails to sign zone
- Resolves: RHEL-138570 AddressSanitizer: SEGV ipa-pwd-extop/common.c:584 in ipapwd_gen_checks
- Resolves: RHEL-138473 Include latest fixes in python3-ipatests package
- Resolves: RHEL-137585 ipa-server-upgrade succeeds but ipactl restart fails due to ipa-dnskeysyncd service failure caused by SELinux AVC denial on RHEL 9.8</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-2" date="1770379200">- RHEL-147191 ipa uninstallation is failing with message "'NoneType' object has no attribute 'lower'"
- RHEL-146185 Names of domains from a trusted forest should be compared case-insentive
- RHEL-146184 ipa-advise client script requires keytab (should just require root access on client system)
- RHEL-145854 Include latest fixes in python3-ipatests package
- RHEL-143684 When using xmlrpc, ipa server failed with assert type(value) in (unicode, float, int, bool, type(None))
- RHEL-141500 ipa use systemd-sysusers</changelog>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 4.13.1-3" date="1770724800">- RHEL-148282 ipa-replica-conncheck fails with "an internal error has occured"
- RHEL-148481 Pruning is enabled by default with RSN on RHEL 9.8</changelog>
  <changelog author="David Hanina &lt;dhanina@redhat.com&gt; - 4.13.1-3.1" date="1776081600">- Resolves: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z]
- Resolves: RHEL-155037 Pagure #9953: Adding a group with 32Bit Idrange fails. [rhel-9.8.z]
- Resolves: RHEL-153146 IdM password policy Min lifetime is not enforced when high minlife is set [rhel-9.8.z]
- Resolves: RHEL-168047 ipa ca-show ipa --all failing to list RSN version</changelog>
  <changelog author="David Hanina &lt;dhanina@redhat.com&gt; - 4.13.1-3.2" date="1776340800">- Related: RHEL-166865 Include latest fixes in python3-ipatests package [rhel-9.8.z]</changelog>
</package>
<package pkgid="f340a5762e2bf8dfceb87e79774387ad7625a143f3f9e830eedfe999d6b6a9e5" name="iperf3-devel" arch="aarch64">
  <version epoch="0" ver="3.9" rel="16.el9"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-12" date="1717502400">- Resolves: RHEL-39975 - possible denial of service</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-13" date="1718107200">- Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-14" date="1736424000">- Resolves: RHEL-72933 - Denial of Service in iperf Due to Improper JSON Handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-15" date="1768910400">- Resolves: RHEL-136179 - iperf Heap Buffer Overflow (CVE-2025-54349)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-16" date="1768910401">- Resolves: RHEL-132941 - iperf3 broken once "--logfile" is specified on server side</changelog>
</package>
<package pkgid="4c60815b284d920b26db07b21ac93d7bf374a3bdcba50b6ea1463f1bbac43194" name="iperf3-devel" arch="aarch64">
  <version epoch="0" ver="3.9" rel="17.el9_8"/>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-12" date="1717502400">- Resolves: RHEL-39975 - possible denial of service</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-13" date="1718107200">- Resolves: RHEL-29579 - vulnerable to marvin attack if the authentication option is used</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-14" date="1736424000">- Resolves: RHEL-72933 - Denial of Service in iperf Due to Improper JSON Handling</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-15" date="1768910400">- Resolves: RHEL-136179 - iperf Heap Buffer Overflow (CVE-2025-54349)</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-16" date="1768910401">- Resolves: RHEL-132941 - iperf3 broken once "--logfile" is specified on server side</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 3.9-17" date="1776081600">- Resolves: RHEL-151875 - authentication no longer works with the new openssl</changelog>
</package>
<package pkgid="827009295b5f1e3b086743802d5a43421f2471a73b05b2ee7ff8bf616e45644b" name="iproute-doc" arch="aarch64">
  <version epoch="0" ver="6.17.0" rel="2.el9"/>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-1" date="1734004800">- iproute-6.11.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-2" date="1743422400">- Fix gating yaml</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-3" date="1743422401">- Add tmt test plan</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-4" date="1743422402">- Add image-mode testing</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.11.0-5" date="1743595200">- image-mode: double test duration</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-1" date="1748347200">- iproute-6.14.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.14.0-2" date="1750593600">- iproute-6.14.0-2.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-1" date="1761048000">- iproute-6.17.0-1.el9</changelog>
  <changelog author="Andrea Claudi &lt;aclaudi@redhat.com&gt; - 6.17.0-2" date="1769515200">- iproute-6.17.0-2.el9</changelog>
</package>
<package pkgid="b98e80cbe875084329f8fbf779154702900f2d57aaf5463b5a3e6edfe906bba4" name="ipxe-rhcert" arch="noarch">
  <version epoch="0" ver="20200823" rel="9.git4bd064de.el9_0"/>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 20190125-9.git36a4c85f" date="1599220800">- Workaound fatal GCC 9 compilation/link errors
- Fix conditionals for perl BuildRequires</changelog>
  <changelog author="Cole Robinson &lt;aintdiscole@gmail.com&gt; - 20200823-1.git4bd064de.git" date="1600171200">- Update to newer git snapshot, synced with qemu.git
- Re-enable HTTPS support, with edk2 fix included (bz 1820836)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200823-2.git4bd064de" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200823-3.git4bd064de" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20200823-4.git4bd064de" date="1623153600">- ipxe-Skip-some-QEMU-ROMs-when-building-for-RHEL.patch [bz#1956931]
- ipxe-spec-combine-BIOS-and-EFI-roms-using-util-catrom.pl.patch [bz#1957246]
- Resolves: bz#1956931
  (ipxe-roms-qemu list: Clean out old ROMs)
- Resolves: bz#1957246
  (boot vm from pxe failed)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20200823-5.git4bd064de" date="1627300800">- ipxe-Disable-SHA-1.patch [bz#1935932]
- ipxe-Replace-genisoimage-with-xorriso.patch [bz#1971981]
- ipxe-spec-Drop-disabled-efi-ia32-build-infrastructure.patch [bz#1980138]
- ipxe-spec-Generate-qemu-compatible-rom-filenames.patch [bz#1980138]
- Resolves: bz#1935932
  (ipxe implements and/or uses the deprecated SHA-1 algorithm by default ()
- Resolves: bz#1971981
  (Please replace genisoimage with xorriso)
- Resolves: bz#1980138
  (install qemu rom symlinks so qemu doesn't have to)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 20200823-6.git4bd064de" date="1628337600">- ipxe-Add-ping-command-support.patch [bz#1985658]
- ipxe-Add-VLAN-tagging-support.patch [bz#1985658]
- ipxe-netdevice-Strip-802.Q-VLAN-0-priority-tags.patch [bz#1985658]
- ipxe-Provide-snponly.efi-rom.patch [bz#1985658]
- ipxe-Build-hwcert-subpackage.patch [bz#1985658]
- Resolves: bz#1985658
  (carry forward rhel8 ipxe packaging changes)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200823-7.git4bd064de" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20200823-8.git4bd064de" date="1648728000">- Add ARM 64 EFI artifacts [yselkowi] (bz 2059349)</changelog>
  <changelog author="Jarod Wilson &lt;jarod@redhat.com&gt; - 20200823-9.git4bd064de" date="1649160000">- Fix Obsoletes: and changelog versioning</changelog>
</package>
<package pkgid="0a8f1d63fa54decda288f37c7346062573a252979d7db07e586b0630743eb009" name="iscsi-initiator-utils-devel" arch="aarch64">
  <version epoch="0" ver="6.2.1.11" rel="0.git4b3e853.el9"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.9-18.gita65a472" date="1700049600">- rebase to upstream 2.1.9+ with iscsiuio 0.7.8.8
- new meson build system, sync with fedora packaging</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
</package>
<package pkgid="f217ae3dfedddde7eded61cfae06fcc09bbf7ed97d158c0730cecb80be534eff" name="iscsi-initiator-utils-devel" arch="aarch64">
  <version epoch="0" ver="6.2.1.11" rel="1.git4b3e853.el9_8.2"/>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-0.git4b3e853" date="1746619200">- Open-iSCSI upstream 2.1.11</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 6.2.1.11-1.git4b3e853" date="1782388800">- fix regression in fw and static node records</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.1" date="1785412800">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 6.2.1.11-1.git4b3e853.2" date="1785412801">- fix CVE-2026-44943: path traversal via IQN names in discovery
- fix CVE-2026-44944: iscsiuio socket credential verification bypass</changelog>
</package>
<package pkgid="1a1ae9b12c0c8df4219af7e672b0c6e92bbdc1ae4efe7066b46e23b867e2da51" name="isns-utils-devel" arch="aarch64">
  <version epoch="0" ver="0.101" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.97-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.97-12" date="1598011200">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.100-0" date="1600344000">- rebase to upstream v0.100 + patches from git</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.100-1" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.100-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-1" date="1622030400">- update to 0.101
- bz#1958038 disabled Werror, which fixes the build with OpenSSL 3 while still using deprecated functions
- setup new upstream tests as gating</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.101-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Chris Leech &lt;cleech@redhat.com&gt; - 0.101-4" date="1631620800">- #1934951 remove DSA/SHA-1 based authentication support</changelog>
</package>
<package pkgid="bd2a0bcc8793b696fb5d7ee5152027c437f9bbee295a8634faa7956a779910f5" name="isns-utils-devel" arch="aarch64">
  <version epoch="0" ver="0.101" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.101-4.1" date="1785412800">- Fix CVE-2026-55995: prevent double-free in attrs.c error paths</changelog>
</package>
<package pkgid="1fbb02941947cba0b31c7903618d659947e95809ffa2f3bddf73ad0212294aff" name="isomd5sum-devel" arch="aarch64">
  <version epoch="1" ver="1.2.3" rel="14.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1:1.2.3-7" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1:1.2.3-9" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 1.2.3-11" date="1606824000">- Add make to BuildRequires</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.2.3-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.2.3-14" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="541313b0f0c294fe916219c5a1d0455622a47eb2e0ed4173ad08b8e978163844" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="160.el9"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-151" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38587)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38587</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-156" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-157" date="1763121600">- Fix duplicate iwlwifi files in iwl*-firmware and linux-firmware packages
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-158" date="1763208000">- Fix placement of several iwlwifi files in iwl*-firmware
- Correct changelog dates
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-159" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-160" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
</package>
<package pkgid="ad406d46602fbebf7fb9c11640740363a3ba798359666dae0abc84534def9b23" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="161.1.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="152e2aa8e0986bcfd4d5483505de5fc84a352f1e6787450d29501cbf0cd84a2f" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="161.2.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260804-161.2" date="1787832000">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="585734adce506e5327062b1a953594920328ca339074296036502f4ddaad3a91" name="iwl3945-firmware" arch="noarch">
  <version epoch="0" ver="15.32.2.9" rel="161.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="b7d0dea128aea454d808d937d4630c62613b5398e85f61b7ba7f3ac17400d0a7" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="160.el9"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-151" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38587)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38587</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-156" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-157" date="1763121600">- Fix duplicate iwlwifi files in iwl*-firmware and linux-firmware packages
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-158" date="1763208000">- Fix placement of several iwlwifi files in iwl*-firmware
- Correct changelog dates
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-159" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-160" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
</package>
<package pkgid="e180251aadb803f783f321a6615b74820dadb2e8e3359536631c367ebb3bd694" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="161.1.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="fa31ae2bef1def05a4adc5d001691e2cd854c68721fb5fb0c0c30a93f5b1b7a0" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="161.2.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260804-161.2" date="1787832000">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="4a9bcbe336e9b7dfbf90f903ac3ec0a36d8a66eba1005832317193aaa596c192" name="iwl4965-firmware" arch="noarch">
  <version epoch="0" ver="228.61.2.24" rel="161.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="bd5239d4b79483a964f3700d383b3f3a8fe4caaa527d639be89a53a966910b5a" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="160.el9"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-151" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38587)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38587</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-156" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-157" date="1763121600">- Fix duplicate iwlwifi files in iwl*-firmware and linux-firmware packages
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-158" date="1763208000">- Fix placement of several iwlwifi files in iwl*-firmware
- Correct changelog dates
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-159" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-160" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
</package>
<package pkgid="2bee2307bda122a5d62725bc6a7c99be9faa27d462e90950fca45c8d64a29526" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="161.1.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="c26582ddeca127b96187126d29bde441d2392060f9e9ac2f01b53d8777266ec6" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="161.2.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260804-161.2" date="1787832000">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="46a231d5a7d89b7ce5821e572feb54667503434c6a9e110e47a178f2d5c35328" name="iwl6000-firmware" arch="noarch">
  <version epoch="0" ver="9.221.4.1" rel="161.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="e46047eb797a536a0b7bffdc95249154c088bb00bc9af97f848f35ddbcb9f579" name="jakarta-activation" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="10.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-1" date="1692360000">- Update to upstream version 2.1.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.3-1" date="1709726400">- Update to upstream version 2.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.3-3" date="1724241600">- Switch to new GitHub repository</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.3-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1ab67036aded6c9d9570c4b24552c2f04fb04eb52600f14d48010e81c2756b45" name="jakarta-activation-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.2" rel="8.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2.2-6" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2.2-7" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2.2-8" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="651843e220971aad2d066b4a7667d611eb1717fd2e5634a7adc3e26bbaead0fd" name="jakarta-activation-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="10.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-1" date="1692360000">- Update to upstream version 2.1.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.3-1" date="1709726400">- Update to upstream version 2.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.3-3" date="1724241600">- Switch to new GitHub repository</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.3-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="146c32677d6135df21b32561d1a98f66a44422697038b916c364ab224016d8f1" name="jakarta-activation2-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="2.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.1-1" date="1673956800">- Initial build</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.1-2" date="1675252800">- Reduce dependencies</changelog>
</package>
<package pkgid="4f53614f2c0c7b3537ab9d20b951fd8f888902100231d1941978d3d295e07225" name="jakarta-annotations" arch="noarch">
  <version epoch="0" ver="1.3.5" rel="14.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.3.5-6" date="1597320000">- Remove duplicate aliases</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-8" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-9" date="1622030400">- Re-add provides on glassfish-annotation-api</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-11" date="1628856000">- Fix bundle manifest</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-12" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.5-13" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-14" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="dbf4fee75f762c30b1c0fed695ea45ee3b11c1332ecb02c720ad1e5d61a4803c" name="jakarta-annotations" arch="noarch">
  <version epoch="0" ver="1.3.5" rel="38.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-17" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-18" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-19" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-20" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.5-21" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.5-22" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-23" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-24" date="1724241600">- Switch to new GitHub repository</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-36" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="20695ae7ffb163856ef0b0f4c02f241fab1d22f4881f773c81c823c4ed70fecd" name="jakarta-annotations-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.5" rel="14.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.3.5-6" date="1597320000">- Remove duplicate aliases</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-8" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-9" date="1622030400">- Re-add provides on glassfish-annotation-api</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-11" date="1628856000">- Fix bundle manifest</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-12" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.5-13" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-14" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="0dced3972621073a0803f91bb24590cdbbe3412907cfc3e14a37162d441fd63d" name="jakarta-annotations-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.5" rel="15.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.5-13" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-14" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-15" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="a390fadde43ce32d5bf3811d37cc58fc02922acc84042762194a92853d1ed7e7" name="jakarta-annotations-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.5" rel="16.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-13" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.3.5-14" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.3.5-15" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.3.5-16" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="add11967b8a7ba02eac7772a31331b3219217cfd5639030c07a206fc6ec7f27c" name="jakarta-annotations-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.5" rel="38.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-17" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-18" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-19" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-20" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.5-21" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.5-22" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-23" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-24" date="1724241600">- Switch to new GitHub repository</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-36" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c26cd620ab69edaeedf324995e0118d0de8ea37a8094ec2a7e84833a9cde9e38" name="jakarta-annotations-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.5" rel="38.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-16" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-17" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-18" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-19" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-20" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.5-21" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.5-22" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.5-23" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-24" date="1724241600">- Switch to new GitHub repository</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.5-36" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="662ed0dfac64b816bdec828dca4e93346ec89d50544e89b8ecdf9a7f6356f16a" name="jakarta-mail" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Andrew Bauer &lt;zonexpertconsulting@outlook.com&gt; - 2.1.2-1" date="1693569601">- Update to 2.1.2 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.3-1" date="1709726400">- Update to upstream version 2.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.3-3" date="1724241600">- Switch to new GitHub repository</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.3-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b12e84bf707a857c787871e5bfb4d2cf7da496689b6fbf5fb36d794fd809c279" name="jakarta-mail-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Andrew Bauer &lt;zonexpertconsulting@outlook.com&gt; - 2.1.2-1" date="1693569601">- Update to 2.1.2 release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.3-1" date="1709726400">- Update to upstream version 2.1.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.3-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.3-3" date="1724241600">- Switch to new GitHub repository</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.3-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="76b6aa07ab2ebf22ba795a1811604984318d0c91b27eb5f684582c2e199b2388" name="jakarta-oro-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.8" rel="39.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.0.8-35" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.0.8-36" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.0.8-37" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.0.8-38" date="1732363200">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.8-39" date="1733313600">- Set javac source and target to 1.8</changelog>
</package>
<package pkgid="5f3fd2657418e25917484934291a9cafca67e506f73bc32d06dc48cab5728bbe" name="jakarta-servlet" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="11.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 5.0.0-2" date="1597838400">- Also ship the API in the old javax namespace to aid transition</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 5.0.0-3" date="1597838401">- Add compat symlink for packages constructing the classpath manually.</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 5.0.0-4" date="1597924800">- Correct mvn_file macro invokation</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-7" date="1622030400">- Re-add provides on glassfish-servlet-api</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-8" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-9" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.0.0-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-11" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="69fb6e816322e15b555ab87f8c8791489ff5ba085ee71f229ef1194e7cb3b872" name="jakarta-servlet" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="34.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.0.0-17" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.0.0-18" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-19" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-20" date="1724241600">- Switch to new GitHub repository</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-32" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="0847c915c1a19a4e77f6feb965e6586b3b4648f71919b32a24f88b91a7acaf4a" name="jakarta-servlet-javadoc" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="10.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 5.0.0-1" date="1597320000">- Initial package renamed from glassfish-servlet-api.</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 5.0.0-2" date="1597838400">- Also ship the API in the old javax namespace to aid transition</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 5.0.0-3" date="1597838401">- Add compat symlink for packages constructing the classpath manually.</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 5.0.0-4" date="1597924800">- Correct mvn_file macro invokation</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-7" date="1622030400">- Re-add provides on glassfish-servlet-api</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-8" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-9" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.0.0-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="aebed28d30804b63105e7dc26b463a8bb835aceac7efb3b048f9a3a6dd64a042" name="jakarta-servlet-javadoc" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="11.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 5.0.0-2" date="1597838400">- Also ship the API in the old javax namespace to aid transition</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 5.0.0-3" date="1597838401">- Add compat symlink for packages constructing the classpath manually.</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 5.0.0-4" date="1597924800">- Correct mvn_file macro invokation</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-7" date="1622030400">- Re-add provides on glassfish-servlet-api</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-8" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-9" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.0.0-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-11" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="42edd88ee53ddc964c66e38b34d273b2e250da5c3578f771030c6bd021dac691" name="jakarta-servlet-javadoc" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="34.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.0.0-17" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.0.0-18" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0.0-19" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-20" date="1724241600">- Switch to new GitHub repository</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.0.0-32" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="16c25782e2ddd54d0faf19c05b9ac9398b3499105340551772bbbbe7190a52f8" name="jansi" arch="aarch64">
  <version epoch="0" ver="2.4.0" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-5" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973738</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 2.3.3-1" date="1624449600">- Version 2.3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.3-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.3.3-3" date="1632484800">- Install native artifact into a fixed location
- Related: rhbz#1994935</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.4.0-1" date="1635768000">- Update to upstream version 2.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.4.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.4.0-4" date="1657800000">- Make javadoc subpackage noarch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-5" date="1658145600">- Ensure CC env variable is set during build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-6" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="14180f2fc6543570d366b8191a3fded34377f0086b6d952f7acf90d0e5505d33" name="jansi" arch="aarch64">
  <version epoch="0" ver="2.4.1" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-9" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-10" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-11" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.1-1" date="1706788800">- Update to upstream version 2.4.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.4.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.4.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.1-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="5ca6fd835f84046544a5cc7763b667a0e1e8cf37928e52ec71ffa35b96555954" name="jansi-javadoc" arch="aarch64">
  <version epoch="0" ver="2.3.3" rel="7.el9_5"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.3.3-6" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.3.3-7" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
</package>
<package pkgid="9e6c25ce804ab1f88aa6f2846672852c6ab7c071f367b5e23ffd0a0cac1e1443" name="jansi-javadoc" arch="noarch">
  <version epoch="0" ver="2.3.3" rel="9.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.3.3-6" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.3.3-7" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.3.3-8" date="1732363200">- Rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.3.3-9" date="1732449600">- Rebuild</changelog>
</package>
<package pkgid="bb2348801ff22d3a75a04dda016cf24111c241ad635edac92ccf73f0926ec603" name="jansi-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-5" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973738</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 2.3.3-1" date="1624449600">- Version 2.3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.3-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.3.3-3" date="1632484800">- Install native artifact into a fixed location
- Related: rhbz#1994935</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.4.0-1" date="1635768000">- Update to upstream version 2.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.4.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.4.0-4" date="1657800000">- Make javadoc subpackage noarch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-5" date="1658145600">- Ensure CC env variable is set during build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-6" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e6d1b1a6ab489e7ccc74308741b84048d39a7f27926a35f555ae79ab2761b616" name="jansi-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="7.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.4.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.4.0-4" date="1657800000">- Make javadoc subpackage noarch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-5" date="1658145600">- Ensure CC env variable is set during build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-6" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-7" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="9419e5b9339d8b522b55939d73110c640d67c488a4d15bee3bc2200789dad2e2" name="jansi-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.1" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-9" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-10" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-11" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.1-1" date="1706788800">- Update to upstream version 2.4.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.4.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.4.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.1-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="07c633281265d37231b3b459696bed51c55922e9ab7fd238d38f2b7a85ce16cd" name="jansi-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.1" rel="12.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-9" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.0-10" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-11" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.0-12" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.1-1" date="1706788800">- Update to upstream version 2.4.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.4.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.4.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.4.1-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="be5709ad22b05fe098624ec06ecfb76c144d747e424f6cdf55bb700f861f1678" name="jansson-devel-doc" arch="noarch">
  <version epoch="0" ver="2.14" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12-7" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 2.13.1-1" date="1598270400">- Update to 2.13.1 (#1831402)
- Fix docs build failures with Sphinx 3 (#1823532)
- Use make macros: https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 2.14-1" date="1636977600">- Rebase to 2.14
  Related: rhbz#2001066</changelog>
</package>
<package pkgid="7bc195a17e61b3587948a32c9b06d24ed985888ce24ca477df74a038ae3d1fe3" name="java_cup" arch="noarch">
  <version epoch="1" ver="0.11b" rel="22.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-15" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-16" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-17" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-18" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-19" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-20" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.11b-21" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-22" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="ccf24fec33ca6b9a30991367e69e17e841adbb9743849a4d17d75f647bd07603" name="java_cup" arch="noarch">
  <version epoch="1" ver="0.11b" rel="52.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-25" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:0.11b-28" date="1708516800">- Set OpenJDK version to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.11b-29" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.11b-30" date="1709208000">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-31" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-48" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="4d13b9fe1ff49d7cf1506b9f74f02085c9bf498f4e271ebeb7e54a0d51841275" name="java_cup-javadoc" arch="noarch">
  <version epoch="1" ver="0.11b" rel="22.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-15" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-16" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-17" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-18" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-19" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-20" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.11b-21" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-22" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="9eee54b12984344507ef81741c7837b8a9397a975013b487585e3fe5cc33f22a" name="java_cup-javadoc" arch="noarch">
  <version epoch="1" ver="0.11b" rel="52.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-25" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:0.11b-28" date="1708516800">- Set OpenJDK version to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.11b-29" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.11b-30" date="1709208000">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-31" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-48" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="1dca8e88879bda1d754e9bb11c3133bc7a3c51982879d4000d73c716eae79537" name="java_cup-manual" arch="noarch">
  <version epoch="1" ver="0.11b" rel="22.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-15" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-16" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-17" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-18" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-19" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-20" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.11b-21" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-22" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="8b0ffdbafb5f0b3b1f6afd54499600c19230b7cc2c33d86fcab4fc6fbfe27099" name="java_cup-manual" arch="noarch">
  <version epoch="1" ver="0.11b" rel="52.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-23" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-24" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-25" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-26" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-27" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:0.11b-28" date="1708516800">- Set OpenJDK version to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.11b-29" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.11b-30" date="1709208000">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11b-31" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.11b-48" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="ea8431ecabc0ceae3083fb195796319434b1fcf152a99e93889320ee99f7fe65" name="javacc" arch="noarch">
  <version epoch="0" ver="7.0.13" rel="15.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-1" date="1700222400">- Update to 7.0.13
- Drop upstreamed duplicated @Deprecated annotations patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:7.0.13-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:7.0.13-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-7" date="1722340800">- Adjust bootstrap build for javapackages-bootstrap update</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-14" date="1732104000">- Avoid unexpanded macro in package %description</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-15" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="d6f6c355222cb470d4fe84fd589969590ca3cd483fa9b26a2dfcf7b2f1b72a8e" name="javacc-demo" arch="noarch">
  <version epoch="0" ver="7.0.13" rel="15.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-1" date="1700222400">- Update to 7.0.13
- Drop upstreamed duplicated @Deprecated annotations patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:7.0.13-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:7.0.13-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-7" date="1722340800">- Adjust bootstrap build for javapackages-bootstrap update</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-14" date="1732104000">- Avoid unexpanded macro in package %description</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-15" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="cd6019d79453cbab89e7777a3b216a1b3ad90c96f7c77d52b81e08847957f304" name="javacc-javadoc" arch="noarch">
  <version epoch="0" ver="7.0.13" rel="15.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-1" date="1700222400">- Update to 7.0.13
- Drop upstreamed duplicated @Deprecated annotations patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:7.0.13-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:7.0.13-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-7" date="1722340800">- Adjust bootstrap build for javapackages-bootstrap update</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-14" date="1732104000">- Avoid unexpanded macro in package %description</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-15" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="ef99c4ff7bd433653163e66a9e81c4a7dd4cc9792b5b957ca3a828eff35b7adb" name="javacc-manual" arch="noarch">
  <version epoch="0" ver="7.0.13" rel="15.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.12-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-1" date="1700222400">- Update to 7.0.13
- Drop upstreamed duplicated @Deprecated annotations patch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:7.0.13-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:7.0.13-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:7.0.13-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-7" date="1722340800">- Adjust bootstrap build for javapackages-bootstrap update</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 0:7.0.13-14" date="1732104000">- Avoid unexpanded macro in package %description</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:7.0.13-15" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="8133b46fdb674a1fab93123c016156656ee90c8347d803baae87453e9beac4f9" name="javacc-maven-plugin" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-3" date="1693051200">- Bootstrap using javapackages-bootstrap</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.1-7" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.1-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.1.0-1" date="1709467200">- Version 3.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.1.0-7" date="1732104000">- Avoid unexpanded macro in package %description</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1edc55b17563323b9b695daafaec9bdfca9eec70050248a20c61f4ef3f6746e9" name="javacc-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-3" date="1693051200">- Bootstrap using javapackages-bootstrap</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-4" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.1-7" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.1-8" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.1.0-1" date="1709467200">- Version 3.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.1.0-7" date="1732104000">- Avoid unexpanded macro in package %description</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="8df6d75ab2d45fc43936a636d407f1836e6fb519220f8328981a140d9cbd2b24" name="javapackages-common" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.module_el9.2.0+25+b1421c1d.alma"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-7" date="1643284800">- Switch to OpenJDK 17 as default JDK/JRE</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-8" date="1651752000">- Install toolchains.xml in correct location in bootstrap mode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.0.0-9" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-10" date="1655208000">- Introduce javapackages-extra and javapackages-common subpackages
- Drop metadata for com.sun:tools and sun.jdk:jconsole
- Re-enable tests
- Re-add manpages
- Drop bootstrap mode</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-1" date="1655985600">- Update to upstream version 6.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.1.0-2" date="1657281600">- Rebuilt for Drop i686 JDKs</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-3" date="1658145600">- Drop ExclusiveArch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.1.0-4.alma" date="1681128000">- Add generated Requires on multiple versions of java-headless</changelog>
</package>
<package pkgid="378c15df40bcccd7c4dd9e1786918fdf1b1890719c66e619a2bd8233e1b34209" name="javapackages-common" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="b3fde67ae25c65bd2b0f1a5c4cdcf951e74407d1e57c85a9ba707802d59e5d4b" name="javapackages-compat" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="b9216c62f14f1d57657b95e3cb2aa0c70037d40603d9a77fc37c2c74af5376c7" name="javapackages-extra" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.module_el9.2.0+25+b1421c1d.alma"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-7" date="1643284800">- Switch to OpenJDK 17 as default JDK/JRE</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-8" date="1651752000">- Install toolchains.xml in correct location in bootstrap mode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.0.0-9" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-10" date="1655208000">- Introduce javapackages-extra and javapackages-common subpackages
- Drop metadata for com.sun:tools and sun.jdk:jconsole
- Re-enable tests
- Re-add manpages
- Drop bootstrap mode</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-1" date="1655985600">- Update to upstream version 6.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.1.0-2" date="1657281600">- Rebuilt for Drop i686 JDKs</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-3" date="1658145600">- Drop ExclusiveArch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.1.0-4.alma" date="1681128000">- Add generated Requires on multiple versions of java-headless</changelog>
</package>
<package pkgid="658fbd6deb98c0ed876daa3ec85110762f1d068581200c06692c49b593a8c232" name="javapackages-filesystem" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.module_el9.2.0+25+b1421c1d.alma"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-7" date="1643284800">- Switch to OpenJDK 17 as default JDK/JRE</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-8" date="1651752000">- Install toolchains.xml in correct location in bootstrap mode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.0.0-9" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-10" date="1655208000">- Introduce javapackages-extra and javapackages-common subpackages
- Drop metadata for com.sun:tools and sun.jdk:jconsole
- Re-enable tests
- Re-add manpages
- Drop bootstrap mode</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-1" date="1655985600">- Update to upstream version 6.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.1.0-2" date="1657281600">- Rebuilt for Drop i686 JDKs</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-3" date="1658145600">- Drop ExclusiveArch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.1.0-4.alma" date="1681128000">- Add generated Requires on multiple versions of java-headless</changelog>
</package>
<package pkgid="8abbc09d94399a59fee10cbbf265e3b18015f8a8748b017fa3a0e44324985cbd" name="javapackages-filesystem" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="5f10cc14dde8cbd4eb2137e96b0b7c344b146a0b0a052d449d69555bf949288f" name="javapackages-generators" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.module_el9.2.0+25+b1421c1d.alma"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-7" date="1643284800">- Switch to OpenJDK 17 as default JDK/JRE</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-8" date="1651752000">- Install toolchains.xml in correct location in bootstrap mode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.0.0-9" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-10" date="1655208000">- Introduce javapackages-extra and javapackages-common subpackages
- Drop metadata for com.sun:tools and sun.jdk:jconsole
- Re-enable tests
- Re-add manpages
- Drop bootstrap mode</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-1" date="1655985600">- Update to upstream version 6.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.1.0-2" date="1657281600">- Rebuilt for Drop i686 JDKs</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-3" date="1658145600">- Drop ExclusiveArch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.1.0-4.alma" date="1681128000">- Add generated Requires on multiple versions of java-headless</changelog>
</package>
<package pkgid="745b898aa4f24d50aad1377e73a0058b8374bd5a6ed7e7d2890ba804932f98fc" name="javapackages-generators" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="abd8eac35127a22f3eef14978481ed9ee6e982bccdead14db3992ae0cbaf1fbb" name="javapackages-local" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.module_el9.2.0+25+b1421c1d.alma"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-7" date="1643284800">- Switch to OpenJDK 17 as default JDK/JRE</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-8" date="1651752000">- Install toolchains.xml in correct location in bootstrap mode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.0.0-9" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-10" date="1655208000">- Introduce javapackages-extra and javapackages-common subpackages
- Drop metadata for com.sun:tools and sun.jdk:jconsole
- Re-enable tests
- Re-add manpages
- Drop bootstrap mode</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-1" date="1655985600">- Update to upstream version 6.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.1.0-2" date="1657281600">- Rebuilt for Drop i686 JDKs</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-3" date="1658145600">- Drop ExclusiveArch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.1.0-4.alma" date="1681128000">- Add generated Requires on multiple versions of java-headless</changelog>
</package>
<package pkgid="b3ec66b7622f930f86b5036961384276b77d16c31cb1e7c765abd9650b110ba9" name="javapackages-local-openjdk11" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="119e97342cab31106e6ef52d19fcc6eab330e0be840c4bafd43a324c48af1f59" name="javapackages-local-openjdk17" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="b313c179e6de9ef36be7fd93b9761317365e549e126ac55c06f1bbfdcd297dc4" name="javapackages-local-openjdk21" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="8421478039279190ea7969de11a44a121d8de6a9ee81483a155eaebc02629ed3" name="javapackages-local-openjdk8" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="e2c79e4ae07aaeaedd36c7f3895c1a386701db926f3054accf2ec59addbb4765" name="javapackages-tools" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.module_el9.2.0+25+b1421c1d.alma"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-7" date="1643284800">- Switch to OpenJDK 17 as default JDK/JRE</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-8" date="1651752000">- Install toolchains.xml in correct location in bootstrap mode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.0.0-9" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-10" date="1655208000">- Introduce javapackages-extra and javapackages-common subpackages
- Drop metadata for com.sun:tools and sun.jdk:jconsole
- Re-enable tests
- Re-add manpages
- Drop bootstrap mode</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-1" date="1655985600">- Update to upstream version 6.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.1.0-2" date="1657281600">- Rebuilt for Drop i686 JDKs</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-3" date="1658145600">- Drop ExclusiveArch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.1.0-4.alma" date="1681128000">- Add generated Requires on multiple versions of java-headless</changelog>
</package>
<package pkgid="32f53b187141080b0158481e0748b4097c9e0f02aff7cf201498787c78fc40b1" name="javapackages-tools" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="85d1a6174b5c809432b22063dde6b4d926c5b3c39cc77f31117feca4f340fef9" name="javaparser" arch="noarch">
  <version epoch="0" ver="3.26.3" rel="1.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Markku Korkeala &lt;markku.korkeala@iki.fi&gt; - 3.25.6-1" date="1699704000">- Update to upstream version 3.25.6, resolves rhbz#2192489</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.25.6-2" date="1701691200">- Implement bootstrap mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.6-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.6-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Markku Korkeala &lt;markku.korkeala@iki.fi&gt; - 3.25.8-1" date="1708516800">- Update to upstream version 3.25.8, closes rhbz#2252668
- Upstream removed plugin coveralls-maven-plugin</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.25.8-2" date="1708603200">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.25.8-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.8-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.25.8-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Markku Korkeala &lt;markku.korkeala@haidion.com&gt; - 3.26.3-1" date="1735819200">- Update to 3.26.3, closes rhbz#2267732</changelog>
</package>
<package pkgid="387dd02c76932d698e603e2f20896d1ad5c4b93bb8a05fe60457dc0e8f8b3849" name="javaparser-javadoc" arch="noarch">
  <version epoch="0" ver="3.26.3" rel="1.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Markku Korkeala &lt;markku.korkeala@iki.fi&gt; - 3.25.6-1" date="1699704000">- Update to upstream version 3.25.6, resolves rhbz#2192489</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.25.6-2" date="1701691200">- Implement bootstrap mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.6-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.6-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Markku Korkeala &lt;markku.korkeala@iki.fi&gt; - 3.25.8-1" date="1708516800">- Update to upstream version 3.25.8, closes rhbz#2252668
- Upstream removed plugin coveralls-maven-plugin</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.25.8-2" date="1708603200">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.25.8-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.25.8-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.25.8-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Markku Korkeala &lt;markku.korkeala@haidion.com&gt; - 3.26.3-1" date="1735819200">- Update to 3.26.3, closes rhbz#2267732</changelog>
</package>
<package pkgid="bd16e744ef450b643a59a003b6c7ab643c171e6ad43c115429af14ed3294fa6c" name="jaxb-api4-javadoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="1.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.0-1" date="1673956800">- Initial build</changelog>
</package>
<package pkgid="45baa1c180c576cf064ecf90bb26c1fe08e5b0e17429f100bd84e5a4ac577869" name="jaxb-codemodel-annotation-compiler" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="1.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.1-1" date="1673956800">- Initial build</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.0.1-2" date="1675252800">- Update licenses</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
</package>
<package pkgid="08c33c0da97bfce1857c4ff74fadaa30a80ce1f76b5ec4471145081f23fa8726" name="jaxb-dtd-parser-javadoc" arch="noarch">
  <version epoch="0" ver="1.5.0" rel="1.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.5.0-1" date="1673956800">- Initial build</changelog>
</package>
<package pkgid="9da511c04796fe6e7dca1c354d8bfbbe1f07ea16bda9e66c216d702906ed239a" name="jaxb-fi" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="2.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.0-1" date="1673956800">- Initial build</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.0-2" date="1675252800">- Reduce dependencies, reorganize subpackages</changelog>
</package>
<package pkgid="84f8e8105f0c106ba6dab4f0882701cdaa332362cf10a88fa9c7d0ab97932d3a" name="jaxb-fi-tests" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="2.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.0-1" date="1673956800">- Initial build</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.0-2" date="1675252800">- Reduce dependencies, reorganize subpackages</changelog>
</package>
<package pkgid="d56ce1d5ba51f6f941e4f577e6454d0e7502433879c0d2de8c99371827fc01b6" name="jaxb-istack-commons-test" arch="noarch">
  <version epoch="0" ver="4.1.1" rel="2.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.1.1-1" date="1673956800">- Initial build</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.1.1-2" date="1675252800">- Reduce dependencies, reorganize subpackages</changelog>
</package>
<package pkgid="22739ea54a08b7597ff22e09dd95e3921ef1ebfb4f92a3c6d403474220747c89" name="jaxb-stax-ex" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="1.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.0-1" date="1673956800">- Initial build</changelog>
</package>
<package pkgid="4d6835dd53cc065d8a0dec00fd33c0f71086a264cf4d4a54f7bfb963fcd19c8a" name="jaxb-stax-ex-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="1.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.0-1" date="1673956800">- Initial build</changelog>
</package>
<package pkgid="c9e720303864ae8530cdf92796bbab41704f599c4d48c9da05466def3a4f468b" name="jaxb-txwc2" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="1.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.0.1-1" date="1673956800">- Initial build</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.0.1-2" date="1675252800">- Update licenses</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 4.0.2-1" date="1675857600">- Update to upstream version 4.0.2</changelog>
</package>
<package pkgid="cabf01f44521a3199b491eefdbf003ba11c0188580d4316409e7770f3ed591ce" name="jbig2dec" arch="aarch64">
  <version epoch="0" ver="0.19" rel="7.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.19-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.19-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 0.19-7" date="1675080000">- Rebuilt for RHEL-9.2.0
- Resolves: #2121499</changelog>
</package>
<package pkgid="d08473cb63b4dafb9f2ba57043c5f804265da86fcb5234272435c16d01120a75" name="jboss-jaxrs-2.0-api-javadoc" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.0.0-11" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Markku Korkeala &lt;markku.korkeala@iki.fi&gt; - 1.0.0-12" date="1595505600">- Fix JDK11 build by adding dependency for javax.xml.bind.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-13" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-14" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0-15" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d20285d2fcf8b170881c6474b08c99f4a351e269c76d6f9e172f6d6397df5f84" name="jboss-parent" arch="noarch">
  <version epoch="0" ver="20" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 20-9" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="09f6e784c4923290831d3ead9f23137ace3f8a27a9a13cb2b5423515d84098ef" name="jcl-over-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-6" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-7" date="1599652800">- Disable unused log4j12 module.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7.30-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.30-10" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1.7.30-11" date="1637064000">- Enable slf4j-migrator and log4j-over-slf4j modules</changelog>
  <changelog author="Simon Legner &lt;Simon.Legner@gmail.com&gt; - 1.7.32-1" date="1637582400">- Update to upstream version 1.7.32</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="22efe0344b46345bcc899d3be75423c1455db0b57bdff347e162dc0a1c02c8ff" name="jcl-over-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="d664072cba416835385625793c0e28037818355cb33962bb703ba639bf00484c" name="jctools" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.1-3" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.1-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-1" date="1706788800">- Update to upstream version 4.0.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.2-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.2-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="a047d9b74ebfb090b2541c8e8cc037dc90f455869fad9292ba2f35ae15ef38c7" name="jctools-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="3.el9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-8" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 2.1.2-10" date="1595937601">- Patch for javaparser API changes</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 3.1.0-1" date="1599220800">- Update to latest upstream version
- Obsolete sub-packages that cannot be built on JDK 11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.0-1" date="1612267200">- Update to version 3.2.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 3.3.0-1" date="1628596800">- Update to 3.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-2" date="1645444800">- Remove dependency on javaparser and exec-maven-plugin
- Disable tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-3" date="1645617600">- Build with OpenJDK 8</changelog>
</package>
<package pkgid="0115ef9c5a9287bc76adcd7d94a0e095239172cefdca998a47cdcc944efafb5f" name="jctools-javadoc" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.1-3" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.1-4" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-5" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.1-6" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-1" date="1706788800">- Update to upstream version 4.0.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.2-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.2-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.2-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.2-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="611492d352b61710d24e092b8e36da6713e4d027ad44979c8816b88837962fb1" name="jdeparser-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.3" rel="12.el9"/>
  <changelog author="Dogtag PKI Team &lt;pki-devel@redhat.com&gt; - 2.0.3-1" date="1570536000">- Rebuild as part of revival process
- BZ#1758686</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.3-3" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Markku Korkeala &lt;markku.korkeala@iki.fi&gt; - 2.0.3-5" date="1595937601">- Force Java 8 as sun.reflect.Reflection is removed in Java 11.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.3-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.3-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; 2.0.3-9" date="1629201600">- Bug 1981014 - jdeparser: FTBFS due to access to internal class sun.reflect.Reflection</changelog>
</package>
<package pkgid="16260114ab51250b12ee1ddfd46eaeced29681c375a8903f6a49f6e85cfc8a44" name="jdepend-demo" arch="noarch">
  <version epoch="0" ver="2.9.1" rel="32.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.9.1-29" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.9.1-30" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.9.1-31" date="1732363200">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.1-32" date="1733313600">- Update Java source/target to 1.8
- Fix unexpected permissions of regular files</changelog>
</package>
<package pkgid="5184ffb5c1493007e64314dcd61a25bca48fa55a61c44ff4f2807edc6bf3b065" name="jdepend-javadoc" arch="noarch">
  <version epoch="0" ver="2.9.1" rel="32.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.9.1-29" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.9.1-30" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.9.1-31" date="1732363200">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.1-32" date="1733313600">- Update Java source/target to 1.8
- Fix unexpected permissions of regular files</changelog>
</package>
<package pkgid="f224f1ffa03f14ccdd2bb1e704fa4e04cceb9d736f18404a4f8c35a84696bdde" name="jdependency" arch="noarch">
  <version epoch="0" ver="1.2" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-7" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.2-8" date="1595073600">- Set javac source and target to 1.8 to fix Java 11 builds.
- Remove one test case that is harmlessly broken with Java 11.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1.2-12" date="1626091200">- Add commons-lang3 dependency for tests.
- Resolves: RHBZ#1981024</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="805861bc52bbae7ddd058b1c6c2d3cfd17de0e2d6792e4d8d0d7fde106ea270c" name="jdependency-javadoc" arch="noarch">
  <version epoch="0" ver="1.2" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2-7" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.2-8" date="1595073600">- Set javac source and target to 1.8 to fix Java 11 builds.
- Remove one test case that is harmlessly broken with Java 11.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 1.2-12" date="1626091200">- Add commons-lang3 dependency for tests.
- Resolves: RHBZ#1981024</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="88d1b7cd57fb2efae80b7fab868f60ec70f4b27183f7a70b6463ae27903149a4" name="jdom" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="28.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-20" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:1.1.3-21" date="1593086400">- Fix compilation with Java 11.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.1.3-22" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-23" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-24" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-25" date="1621252801">- Bump release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-26" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-27" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-28" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0b3c82f15bee5517b928296e240636720ca142934af9d603ef9e0f0e47036cb7" name="jdom" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="31.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-23" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-24" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-25" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.3-27" date="1626955201">- Add P100: Fixes CVE-2021-33813</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-28" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-29" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-30" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-31" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="595ab3f7d92cf65d06c7666a4960f5475bb167e57c49c61e63f4a9c3748facb5" name="jdom" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="42.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-32" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-33" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-34" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-35" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.3-36" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-37" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-38" date="1709208000">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-39" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-40" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="7f6e3b65133fc68a71b4322ff67693fd5b276a3877c5dfc286421d5d61aa78c0" name="jdom-demo" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="28.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-20" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:1.1.3-21" date="1593086400">- Fix compilation with Java 11.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.1.3-22" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-23" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-24" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-25" date="1621252801">- Bump release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-26" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-27" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-28" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9068bc64a680dfbec497b258cd144f29850b84e850b8976a2769433ef7657eee" name="jdom-demo" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="31.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-23" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-24" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-25" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.3-27" date="1626955201">- Add P100: Fixes CVE-2021-33813</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-28" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-29" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-30" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-31" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="87e4ed325d2188bd1bad69e32da348e44dc61805c8da604662db0415d9a3788f" name="jdom-demo" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="42.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-32" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-33" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-34" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-35" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.3-36" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-37" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-38" date="1709208000">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-39" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-40" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="3060dd2e269646f5dc028fb8361b56a16b6405a8da1ac69a7931fa15f6fab1dc" name="jdom-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="28.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-20" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 0:1.1.3-21" date="1593086400">- Fix compilation with Java 11.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.1.3-22" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-23" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-24" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-25" date="1621252801">- Bump release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-26" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-27" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-28" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="978e3370323ba9dd94eb34641b6644b69c493f0d96d968c935d81adef4557bb9" name="jdom-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="31.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-23" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.1.3-24" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-25" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.3-27" date="1626955201">- Add P100: Fixes CVE-2021-33813</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-28" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-29" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-30" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-31" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="2c9bb47662d8be88a1dcff76578c37fef22ef8e78d715935ec5eeeaa841d8f16" name="jdom-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="42.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-32" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-33" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-34" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-35" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.3-36" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-37" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-38" date="1709208000">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-39" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-40" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c878394298a4bcfd343ad13d63b1c861d43149fb735263e2d45d73db1c459a11" name="jdom2" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="25.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.6-16" date="1588852800">- Drop optional isorelax verifier support from contrib.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.6-17" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.6-18" date="1595160000">- Set javac source and target to 1.8 to fix Java 11 builds.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-19" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.6-20" date="1599739200">- Drop log4j12 dependency and switch junit module to log4j 1.2 API shim.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-22" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-23" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-24" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.6-25" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="33c552a6a3e8e5b1279642f0fa9ef3d1618923d09b4a2b48c298a943ea5b8e33" name="jdom2" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="28.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-19" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.6-20" date="1599739200">- Drop log4j12 dependency and switch junit module to log4j 1.2 API shim.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-22" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-23" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-24" date="1634212800">- Add patches to address DoS security vulnerability
- Resolves CVE-2021-33813</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-25" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-26" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.6-27" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-28" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="1d54ad8e60b1e27c08d8382f6b3b32e8023cb42f41779deb1e974103280ab9f3" name="jdom2" arch="noarch">
  <version epoch="0" ver="2.0.6.1" rel="18.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.0.6.1-6" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.6.1-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.6.1-8" date="1709208000">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-9" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6.1-16" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="377d1947f6c124eb32cfdc78d97cff538804f3a822ed1e6dbfba6270ebba9db3" name="jdom2-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="25.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.6-16" date="1588852800">- Drop optional isorelax verifier support from contrib.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.6-17" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.6-18" date="1595160000">- Set javac source and target to 1.8 to fix Java 11 builds.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-19" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.6-20" date="1599739200">- Drop log4j12 dependency and switch junit module to log4j 1.2 API shim.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-22" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-23" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-24" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.6-25" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cbb236fbc0335658f30fc5419831b3fee9dd72233e1179ac29f971c2ac87582e" name="jdom2-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="28.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-19" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.6-20" date="1599739200">- Drop log4j12 dependency and switch junit module to log4j 1.2 API shim.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-22" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-23" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-24" date="1634212800">- Add patches to address DoS security vulnerability
- Resolves CVE-2021-33813</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6-25" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-26" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.6-27" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6-28" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="44bb9c87058d24f22c0b67799cde60c9c0cbc90c6a234a9233a254cddca097df" name="jdom2-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.6.1" rel="18.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-4" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-5" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.0.6.1-6" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.6.1-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.6.1-8" date="1709208000">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.6.1-9" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.6.1-16" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="62bd0c7633ab53aba79fbbc7405a77c57aa5ee3d5d5a648a03dbb61f5efcae8b" name="jflex" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="11.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-8" date="1637409600">- Remove unused sources</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-9" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-11" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="924f497cb7df633ecde76c693e671dbc7f244ea7085ebd33daf467c2de8a448d" name="jflex" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="41.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.0-17" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0-18" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-19" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-20" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-39" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="546aedcd6e062ddfdc8a6940bd2bbe3626ef7cd7c88b6b4094be1cc8bfa22807" name="jflex-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="11.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-8" date="1637409600">- Remove unused sources</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-9" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-11" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="307be78bf6a95ba5d43b6f3672df657e97929d843946f201cb1ef756aa817e68" name="jflex-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="41.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-12" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-13" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-14" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-15" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-16" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.0-17" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0-18" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-19" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-20" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-39" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="2ecde69b917f47be431d92c83c8d1c1b1ffe10f72db8ca0bee7e05eb01741d0b" name="jmc-core-javadoc" arch="noarch">
  <version epoch="0" ver="7.1.1" rel="5.el9.2.alma"/>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 7.1.1-5.2.alma" date="1614600000">- Add junit to BR</changelog>
</package>
<package pkgid="c4ec5c6e9f21624f72d0f9b6587f6567d1561dfad9e3769ffca1c1ce328ca47f" name="jna-javadoc" arch="noarch">
  <version epoch="0" ver="5.6.0" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.6.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 5.6.0-4" date="1619697600">- Build without reflections optional dependency (#1954987)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.6.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 5.6.0-6" date="1629288000">- Rebuilt for libffi 3.4.2 SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.6.0-7" date="1674475200">- Fix compatibility with Java 8
- Resolves: rhbz#2162040</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 5.6.0-8" date="1675080000">- Set correct compat. value also to ant parameters
- Resolves: rhbz#2162040</changelog>
</package>
<package pkgid="0c5d4a05b2cf676d8e26df288d2b3ce74adbcf5a22b6d6f38dc975dcca9e53a8" name="js-d3-flame-graph-doc" arch="noarch">
  <version epoch="0" ver="4.0.7" rel="1.el9"/>
  <changelog author="Andreas Gerstmayr &lt;agerstmayr@redhat.com&gt; 3.0.2-1" date="1584705600">- initial version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.2-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.2-5" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Andreas Gerstmayr &lt;agerstmayr@redhat.com&gt; - 3.0.2-6" date="1625054400">- change webpack hash function to sha256
- remove unused cryptographic implementations</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.2-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Andreas Gerstmayr &lt;agerstmayr@redhat.com&gt; - 4.0.7-1" date="1633089600">- update to 4.0.7 tagged upstream community sources, see CHANGELOG</changelog>
</package>
<package pkgid="bb8f7d623a4d7505f0e02d21136b4e86e6ff92c211fb509a084978dea89e57b4" name="jsch-javadoc" arch="noarch">
  <version epoch="0" ver="0.1.55" rel="8.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 0.1.55-6" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 0.1.55-7" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 0.1.55-8" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="0152cc1f78799f3384b1ce9ec42c4a34a6a4b7df0f694cf37f636811eda7fd41" name="json-glib-tests" arch="aarch64">
  <version epoch="0" ver="1.6.6" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-6" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.5.2-1" date="1598270400">- Update to 1.5.2</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.0-1" date="1599825600">- Update to 1.6.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;rhughes@redhat.com&gt; - 1.6.2-1" date="1612872000">- Update to 1.6.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.4-1" date="1629288000">- Update to 1.6.4</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.6.6-1" date="1629806400">- Update to 1.6.6</changelog>
</package>
<package pkgid="ae47b2229a57851cb4fa291f9133ad44ffbc60c3e68ce1ee537c1a704b8979ea" name="jsoup" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.16.1-1" date="1690200000">- Unretire with version 1.16.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.1-2" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.1-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.1-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.2-1" date="1706788800">- Update to upstream version 1.17.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.17.2-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.18.1-1" date="1721044800">- Update to upstream version 1.18.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.18.1-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="262a5599401f889ef9cde5c02280376b95199e94de959fbc983c79614543e70e" name="jsoup-javadoc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="13.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.13.1-10" date="1675166400">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.13.1-11" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.13.1-12" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.13.1-13" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="62243319211eed7215b41d8d1d31322ead07b9825673ccdf75fd10750d8da24d" name="jsoup-javadoc" arch="noarch">
  <version epoch="0" ver="1.18.1" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.16.1-1" date="1690200000">- Unretire with version 1.16.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.16.1-2" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.1-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16.1-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.17.2-1" date="1706788800">- Update to upstream version 1.17.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.17.2-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.18.1-1" date="1721044800">- Update to upstream version 1.18.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.18.1-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="508bc802f6c7326d1f7f5e7c5d494387c9b71fdf8c01f06ba95a557d029fe5b2" name="jsr-305" arch="noarch">
  <version epoch="0" ver="3.0.2" rel="36.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-10" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-11" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-12" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-13" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.2-14" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.2-15" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-16" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-17" date="1722340800">- Replace CC-BY-2.5 annotations with Apache-2.0 ones
- Resolves: rhbz#2301569</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.2-33" date="1732363200">- Use xpath macros instead of sed</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-34" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="bf326dec1656b92e4f24b0c14b4a553b406f1d6e82e39517583803fe73c8425c" name="jsr-305" arch="noarch">
  <version epoch="0" ver="3.0.2" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.30.20130910svn" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.2-1" date="1599825600">- Rebuild a properly versioned package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.31.20130910svn" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.2-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-6" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="9e8f5a817bb5b12c55e158886f270c837c4fb75c8735e0b2e7d3784ddd8b0aad" name="jsr-305-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.2" rel="36.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-10" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-11" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-12" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-13" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.2-14" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.2-15" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-16" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-17" date="1722340800">- Replace CC-BY-2.5 annotations with Apache-2.0 ones
- Resolves: rhbz#2301569</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.2-33" date="1732363200">- Use xpath macros instead of sed</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-34" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="4de961ffa2f5ef27830e18378d8f6a4393f790f43c74adda5bf5494c981c798b" name="jsr-305-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.2" rel="36.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-10" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-11" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-12" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-13" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.2-14" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.2-15" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-16" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-17" date="1722340800">- Replace CC-BY-2.5 annotations with Apache-2.0 ones
- Resolves: rhbz#2301569</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.2-33" date="1732363200">- Use xpath macros instead of sed</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-34" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="03c571e3888c127c3bc52de14783f58145e20b112b535816fafef952a9d90a8f" name="jsr-305-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.2" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.30.20130910svn" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.2-1" date="1599825600">- Rebuild a properly versioned package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0-0.31.20130910svn" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.2-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-6" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="03a99536f892e77bdd34eb94fcc270905c2a521459fe4528faf9448e187bba84" name="jsr-305-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.2" rel="7.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.2-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.2-6" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-7" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="87acc064826d4f4750c6a3660cde117018e9b654b21fb8edc4d8fa8120778924" name="jsr-305-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.2" rel="9.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.2-6" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.0.2-7" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.0.2-8" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.0.2-9" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="1d39ea98dfa635426d0d4b06e769b4fa43550a714360c905433cab5aaa03ff70" name="jul-to-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.30" rel="16.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-13" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-14" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-15" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-16" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="5c5642400daff8171196dc7c1ebf19ab7d953e0b5a32ba0b9575a38726235ad6" name="jul-to-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-6" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-7" date="1599652800">- Disable unused log4j12 module.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7.30-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.30-10" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1.7.30-11" date="1637064000">- Enable slf4j-migrator and log4j-over-slf4j modules</changelog>
  <changelog author="Simon Legner &lt;Simon.Legner@gmail.com&gt; - 1.7.32-1" date="1637582400">- Update to upstream version 1.7.32</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="22ffc4d2bc0e95db50fe39e0da51d6fa75eaf8e7fcbb95dbc2735dc4e37ddd4b" name="jul-to-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="8534bd972feb7d75fa16434dbaaabfb2d034f242aae36846c63aa06a58971838" name="jul-to-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="a674095b9d425908dbc15b697fca17be2a024dfbc8e81a989a378f5a42996bf7" name="jul-to-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="73ddda93ae08b182da39fcdfaa7fd28bcc98174e0f26cbfccdc13272771d4c3f" name="julietaula-montserrat-alternates-fonts" arch="noarch">
  <version epoch="1" ver="7.210" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.200-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:7.200-9" date="1589371200">- Minor conditional tweaks for ELN</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1:7.210-1" date="1590667200">- Update to 7.210</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.210-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.210-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1:7.210-4" date="1614945600">- Add base and extra subpackage web fonts for Design Team</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:7.210-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:7.210-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7bd71d5eb751b5452b05f5ad43669f033b418847199d931951cf226ac73b69cb" name="julietaula-montserrat-base-web-fonts" arch="noarch">
  <version epoch="1" ver="7.210" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.200-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:7.200-9" date="1589371200">- Minor conditional tweaks for ELN</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1:7.210-1" date="1590667200">- Update to 7.210</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.210-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.210-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1:7.210-4" date="1614945600">- Add base and extra subpackage web fonts for Design Team</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:7.210-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:7.210-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fb06f3ce542d66b28870220c6ec92a772ac065189cc00889bb180d01dad301d3" name="julietaula-montserrat-extra-web-fonts" arch="noarch">
  <version epoch="1" ver="7.210" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.200-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:7.200-9" date="1589371200">- Minor conditional tweaks for ELN</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1:7.210-1" date="1590667200">- Update to 7.210</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.210-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.210-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1:7.210-4" date="1614945600">- Add base and extra subpackage web fonts for Design Team</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:7.210-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:7.210-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="91f9e24d62d440bb644a7137ef33cad576e70efee964f627e4d6bdad071038c7" name="julietaula-montserrat-fonts-common" arch="noarch">
  <version epoch="1" ver="7.210" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.200-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1:7.200-9" date="1589371200">- Minor conditional tweaks for ELN</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1:7.210-1" date="1590667200">- Update to 7.210</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.210-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.210-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Luya Tshimbalanga &lt;luya@fedoraproject.org&gt; - 1:7.210-4" date="1614945600">- Add base and extra subpackage web fonts for Design Team</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:7.210-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:7.210-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1d25de90e7499b2e534d3e194045d98a6af7c853bbdd4673f8f8138bc8ab4b66" name="junit" arch="noarch">
  <version epoch="1" ver="4.13.1" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1:4.13-2" date="1597579200">- Bump release to account for previously untagged 4.13-1.fc33 build.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.13.1-1" date="1607083200">- Update to upstream version 4.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@gmail.com&gt; - 1:4.13.1-4" date="1631707200">- Add alias for junit-dep</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.1-5" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:4.13.1-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-8" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="1c7e3ecc074013e7c1450b6e6083a986f1a098a5e6b72a09fc6ca84d2217189f" name="junit" arch="noarch">
  <version epoch="1" ver="4.13.2" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-11" date="1676548800">- Change packaging to jar instead of bundle</changelog>
  <changelog author="Chris Kelley &lt;ckelley@redhat.com&gt; - 4.13.2-1" date="1682424000">- Update to upstream version 4.13.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:4.13.2-5" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:4.13.2-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.2-15" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="3d5c03b3f847f59484120da1a43f8c869922f18b5c6d5b91cc0b341d51966df7" name="junit-javadoc" arch="noarch">
  <version epoch="1" ver="4.13.1" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1:4.13-2" date="1597579200">- Bump release to account for previously untagged 4.13-1.fc33 build.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.13.1-1" date="1607083200">- Update to upstream version 4.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@gmail.com&gt; - 1:4.13.1-4" date="1631707200">- Add alias for junit-dep</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.1-5" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:4.13.1-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-8" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="6a9a63353d394c7e7f2a70b4e09588e586bc2c53e5a3295c5dfddda78a5b8c59" name="junit-javadoc" arch="noarch">
  <version epoch="1" ver="4.13.1" rel="9.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-6" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-7" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-8" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-9" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="d2d88c8df497dcb3d83bdfe8bf1f8b5c60e03fef53e2c62f8505d0a994e6a32f" name="junit-javadoc" arch="noarch">
  <version epoch="1" ver="4.13.2" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-11" date="1676548800">- Change packaging to jar instead of bundle</changelog>
  <changelog author="Chris Kelley &lt;ckelley@redhat.com&gt; - 4.13.2-1" date="1682424000">- Update to upstream version 4.13.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:4.13.2-5" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:4.13.2-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.2-15" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c487c65fd1a4aca6951752e25d7fb1b6769a9ef74fae7481ef8cdbbfca486907" name="junit-manual" arch="noarch">
  <version epoch="1" ver="4.13.1" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1:4.13-2" date="1597579200">- Bump release to account for previously untagged 4.13-1.fc33 build.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.13.1-1" date="1607083200">- Update to upstream version 4.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@gmail.com&gt; - 1:4.13.1-4" date="1631707200">- Add alias for junit-dep</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.1-5" date="1635854400">- Bump Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:4.13.1-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-8" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="1199dae72364e9d58867785b11df7614f8ad771c8de19c28c048ef8d8589d79c" name="junit-manual" arch="noarch">
  <version epoch="1" ver="4.13.1" rel="9.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-6" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-7" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-8" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-9" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="8ad0fe3460af75420a26e74e700bf9a4801616d59a5a75235f9f494393c87f43" name="junit-manual" arch="noarch">
  <version epoch="1" ver="4.13.2" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.1-9" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:4.13.1-11" date="1676548800">- Change packaging to jar instead of bundle</changelog>
  <changelog author="Chris Kelley &lt;ckelley@redhat.com&gt; - 4.13.2-1" date="1682424000">- Update to upstream version 4.13.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-3" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-4" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:4.13.2-5" date="1708430400">- Port to OpenJDK 21</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:4.13.2-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.13.2-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:4.13.2-15" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="2b196f4b6b06be731df83606e01f550e44706932e0e7ed2f6f8898d16efd68fe" name="junit5" arch="noarch">
  <version epoch="0" ver="5.10.2" rel="13.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.0-1" date="1692360000">- Update to upstream version 5.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.1-1" date="1706788800">- Update to upstream version 5.10.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-1" date="1707220800">- Update to upstream version 5.10.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.10.2-2" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-3" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.2-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-10" date="1726747200">- Disable asciidoc generation</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-11" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="cd6afa9d4cdc2058a647542a84369ec840f7994bed9be51e29f8dcefec7443ee" name="junit5" arch="noarch">
  <version epoch="0" ver="5.8.2" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 5.7.0-1" date="1603540800">- Update to version 5.7.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.7.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 5.7.1-1" date="1613736000">- Update to latest upstream release</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.7.1-1" date="1620993600">- Update to upstream version 5.7.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.7.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.7.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.7.1-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.7.1-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.8.2-1" date="1650628800">- Update to upstream version 5.8.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.2-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="c244f32ab50956e7ef6ccd052dab06ad277b2d13cfe85e18d2c0ce4e6bbeb055" name="junit5-guide" arch="noarch">
  <version epoch="0" ver="5.10.2" rel="13.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.0-1" date="1692360000">- Update to upstream version 5.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.1-1" date="1706788800">- Update to upstream version 5.10.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-1" date="1707220800">- Update to upstream version 5.10.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.10.2-2" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-3" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.2-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-10" date="1726747200">- Disable asciidoc generation</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-11" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="10c0ab677740289a3c56e08b80123155d9b33508ca6417dbd708c08238d41a16" name="junit5-guide" arch="noarch">
  <version epoch="0" ver="5.7.1" rel="8.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 5.7.1-6" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 5.7.1-7" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 5.7.1-8" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="c476752ef4a7beffe0e627583f8b034b57fa47ed879ea63fef5d9b35705bf449" name="junit5-guide" arch="noarch">
  <version epoch="0" ver="5.8.2" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 5.7.0-1" date="1603540800">- Update to version 5.7.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.7.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 5.7.1-1" date="1613736000">- Update to latest upstream release</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.7.1-1" date="1620993600">- Update to upstream version 5.7.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.7.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.7.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.7.1-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.7.1-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.8.2-1" date="1650628800">- Update to upstream version 5.8.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.2-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="1ad55c921dcb313ac0bbff63a82a358dea8ecb7a90c5ce8821e95f4d3c8cffd8" name="junit5-javadoc" arch="noarch">
  <version epoch="0" ver="5.10.2" rel="13.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.0-1" date="1692360000">- Update to upstream version 5.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.0-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.1-1" date="1706788800">- Update to upstream version 5.10.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-1" date="1707220800">- Update to upstream version 5.10.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.10.2-2" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-3" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.10.2-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-10" date="1726747200">- Disable asciidoc generation</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.10.2-11" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e58cc330d3bef7e21e55e5bc01046ecb20344fd5d91ab8a6f65a19e621c229b2" name="junit5-javadoc" arch="noarch">
  <version epoch="0" ver="5.7.1" rel="8.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 5.7.1-6" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 5.7.1-7" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 5.7.1-8" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="38c3f3d5603691ca57374ffd8f1ce899add57f515b271a6a7250ec94d11a5609" name="junit5-javadoc" arch="noarch">
  <version epoch="0" ver="5.8.2" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 5.7.0-1" date="1603540800">- Update to version 5.7.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.7.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 5.7.1-1" date="1613736000">- Update to latest upstream release</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.7.1-1" date="1620993600">- Update to upstream version 5.7.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.7.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.7.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.7.1-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.7.1-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.8.2-1" date="1650628800">- Update to upstream version 5.8.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.2-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="eafae9d162366b6d5f6f6d2eae1aa155f1f04bbfb220e3f0739bae930fbaae7f" name="jurand" arch="aarch64">
  <version epoch="0" ver="1.3.3" rel="6.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.0-1" date="1678881600">- Update to upstream version 1.3.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.1-1" date="1679572800">- Update to upstream version 1.3.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.1-3" date="1693396800">- Obsolete javapackages-extra</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.2-1" date="1700568000">- Update to upstream version 1.3.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-2" date="1705752000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.2-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.3.3-1" date="1724155200">- Update to upstream version 1.3.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.3-4" date="1725451200">- Drop unneeded obsoletes</changelog>
</package>
<package pkgid="a24c1a2930a2481eba7b799866c271c3231ad26a5f7003c36cac9a5cb6c12405" name="jzlib-demo" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="23.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.1.3-20" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.1.3-21" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.1.3-22" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.1.3-23" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="f187c5958c20b3a4f7b2164eff6f0e6b6c58112e31ca9f783b8ec9549ebda5bc" name="jzlib-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="23.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.1.3-20" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.1.3-21" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.1.3-22" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.1.3-23" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="b1652e5bb4be808bce33f5edc8dd644b6737871077680d6110a7a03ba6aec2ac" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="88345d6d90855ca8dae2f0c547f762ac76bf37a4b125095900791838cf4cf36b" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="6814a2f6636b3db4dd296a2acd6d2c210cbb851c1b345dedf3c1c694f1bfda82" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="4cef52b096e327dabee108e81ccfe4a04ae703d5694eaeabb2fc76caad1a8bf6" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="c9ef05e7a9cbffca345e51e5ef70c8d06cd113167e1b6d36b1ac71abe6a9506e" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="a9a40414a4614e24556fe747286b5e63352078733257d0e570ce6c13cd3515c1" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="fcd68cd3ec42694f56d2dee0f3a0c19397d79934f4cef5b0321dfb7fce6cdb0e" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="e79790bbffefc41af358703f6e2442f1631131ff4200aed5ac755ae8ffc71168" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="8a486899f27cea96da5ec81aae88bf9394ae51948200a996345bb895402cfda1" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="1f413f13ccf04203be82197240cc21970e8bc7f6dce15217069e47e4f1d1fa69" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="dd415556cc4025ca79c2a0372cd723cedf81ff4a2021b76116b99f94912f5b36" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="66159c644e6afd910318354c5d887c6cd55cf2bbb0248d5a28978e7fdae41ac6" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="b44d526b1dbf35dd230523639941c48ad965e092c39c67f489333947de45150b" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="280e4d63e913f7583d0945e020abf8a46c02a11a0c6b6aed24c2a94fdda280a6" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="894e9e2212fb01ee682b5426642a0dd15e4871ddf178b827df217c2d6a522153" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d76e09dd289519615621708b8b4e4eb1a268d841c11a23e689f07aa9f80c71d2" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="36b1faad1ec13d041f205b4abe8598c68fdc4e7c2590cf34e7827e2a29cff828" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="37b05d9846e81a0bdc80300beae919d9712fa3013737069ad1a3b98d5ece0ae6" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f10eeaec59187eaafb20886ade5eb37564fa4579199f8429f143d62d2e17f9bf" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="01778c9c354070424b1b06dc54ab03735e62a06a49257dc6f2e330693c760eac" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="140699b59dbdd4a62c547ea42135e5e5cfed316437f6b3ccba55eca1e9139345" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="dd7345e70f72adea66422778693ae8b83099e86fc46bf359cd5e83d77e5e9037" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d4c30cb32de160562c737e9996d46188c792f0c7627d29250a37c25abbbbfda6" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1edb5da6d69444f40aa14c7fa8538abecda0188c2559338f310b9aad874b4eef" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="5696dd94143145fea6ff5693712aa8481cdfff368f309d3d21beb2209f7402fe" name="kernel-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="a39072e1948488d4eebf6fe61d5544d137d3cfc937692080fe26bb70bb6d6044" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="b803d980461c4bfc92c60a2014aed220793ad23b6829249f8ecaafcdc283c0e9" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="ffd5247cada3123d464307bb42e676c8cfacb4257440d57233c93fbba1244603" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="11549db14cd3c1083a2a828e3c330f894b0cebb0a52057f7013b1afc4655e230" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="cd38f366e8da2505b4bf82f6231199709fe869cc5e8f7fc7e17906ab722783b5" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="d8b456d32b81d1a04a288d88624ec2a6148d16424abe24af3f3a0644eddcb116" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="197938a48f7543a0b1c20e9109308c136a41abbaea5b8eec426abe8d7c53865a" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="2c1b8e20a49b46d0a6df111bff088ae8785bdd5846a68a0fa51d6dabf11bd9dc" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="75e9607d25f34fadf2462035809c175ce02d1d2e11cf549178903fb74e9598a4" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="08af58716536672611e18eeec40409cbb4b6879fe603bbda641651c307e44a06" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="afb8acbb050b6ed65260468e115ec3685ef312b6a8f08508747298ea2e8d66ba" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="feab16fc5314cfe5bbec6e5c82f1745c40e18c6bc79089b1ddec55ba4b1c50b1" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="d13949405ba0f7878713e09f59768576b7ac9537ee68d0ce01b523f8d38ea4ec" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="893c05d19b2cb22c88024112debd082f06969538d4d0bf849a5fa47085330173" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="30188fd2bda40db087e15cdea101459aa4356de31a26da63fa17ebb6238a820d" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="24c1d9805236c0ddd4401f7d274142fe1953a9101f39e88502e9485133a2c880" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d36c317e41011aa2c42250e4a05924f1f12a595fdc2ceddd20f33a9aa010ca60" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="fab48727e3cc4a5d435a4783364b8ac0e7a5cf02b334448864448b8ab48b923f" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="e00e67c5f65c02f341a1f8a3ee8c1264e2d8e93c4169745fea10f4eaefc9c678" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f9926bed8333e33196828452b9f80c296bfa8b2b52913d236501144c6ffb6a9e" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a7541941c59b3bcbac845adf07cf9c58260883163751ef08063225d20d60c7a9" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1a1cccea72f2b41fc1fdd3eb04b91211d1b833812b151df21666727de7239f72" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ab9ff2c8ff1c972a3de79f3db2379e54d085879425340134abfc593359d66d8d" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d514d1a1139bef2f8ded334a2025cc9fae5cbe36c2e9d0043cf3c6ac99d3159e" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="a0ec745a4649c188785cc55eb4515cc06768527138692fecf9e94a8e1e4084b4" name="kernel-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="e871abe20bd7d360a39f3cd0f22f02ba1fa537c1faa25f12aef71bf0a7c8273d" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="ada3cb339d47c999e5549129257b53fc4486e2dc49d1487e814ad55c4a16989f" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="f8c6adc98655c6c3c8ce64d8118ad75b2b09e2f321a122960a5b7ccdb8821926" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="09fc5eb11e83e67e747bc4f7b8417544b7214d25c2dcbd06c5c23c96b86dfe0f" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="1c23239a991c16552d8d5620b08d90e46e91cfd3d90d4bc587c8573c6b1688f7" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="6e3243d1528b036810dd2ef885afd4d6b6e0dd9a4be88ccc547cf5c12aa1045b" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="d757ab697c9f24c937d974caf819cee3ab256ccb29f407185a52d6b96d92a4f2" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="f30957a69980515475323b73073de43537e5221fed2033956463b0cf5a96717c" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="1c304e8dbf577cc8cb5596598cb4f5bab9305499ea6a05e31d42dd8971c23f0e" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="135a70d6ef7d32d4b40299cba38b5b9f4f4c866c6a31c98c695fdf2a9e99db6f" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="4ddaf8b9de1d0e07001b3d255793fdbe1b84a4d3c9ab1cd9ecd5207b5bee9b63" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="b42a27bd9b352c10625fa82a1ab13286a9a0531ae9b32c6aeae0d0b6f4954033" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="57fb97173c86692910fff12359056ef01e6a1bfb5bc16d4510ec74ef7c489c86" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="be33ecf08b5b837ec7d87c8bcb020f52b432f386b05ab27c198b1802b03aac66" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d93caabe814926a8564e7301a33e2b24e357be7ef327ee43432a7b228a57d326" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="550ab46f24e25bb0869eaf910eaaae1ddcc414671c31a5939fcf910bf16fa14b" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="074a325d317a6a7f61e83ae1bd14b74365367ac7b4d1917f6f5fd39901861529" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="5c2882987b4debbf7128b39e595c69fb40d1fead1e0478ee917a1aec088c00b2" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="fa09173c2ed17a2a45a254967818eb2813df18623e818081e612bef166caa0ac" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="538cc1be8812631a8d14aab7fd59f0c7138cf49676701aa735fd726102306645" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="187891d0a9e55a95b5dd1337e58d841d101af584f5e0bd3d137b7a5280be867a" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0bb00ea5d7e335657cac7e6ab2fd1103638e3b2c62f82452ad2e9b3a28f7705b" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2389370556e7550dc3033ba3051ecab5df78541fbb4bedbd5bb7e63a669399a8" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="eb3f9035d11e590108c07e9d3ef60106712de17d076f289951e5a69151daafd6" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="b6a99b14d6a47a62a4f2c5a37b823e2e0b7e7055aa48558c62bd8ea6abd266b2" name="kernel-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="830bb15f1b001aa7ce56ed55496f95e88ab771ec756e970f92f6a2d9501d21e7" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="c1eb955d0dc478c8723b99fecf6024caea09fb9ababa49f18c6d12985f9f97d4" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="e529584bf6f8b6f0542715a90dffe633df32cc40eb40b2b75fa5286d1e773054" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="af4a024dc0526c8998a1ebfe7a1b30e2adcc5f4fcbb84d56aa93c796d15ed02b" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="6480a9222d9ca6229cf9dbba893447917182cffd4cedc4329f1cdab9d45fc7f5" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="27b3f205b54d1b93666c3c747d62dc4afdec29de018b453b47aab23f1a35b11e" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="209f63e708657748196e37b782af81a342420c11f65cd8f8df93412a4f661c23" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="3cc628c815b372fbfea5f786b72af6225889085523ff7d10e709c41e6e750388" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="56385c6f86549274e58940690774deb5e571f5b2aa93ce777bf67cebf8a4f653" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="f80db5597f035b9fd33c51914513c54b92a1cfaa5a5cd1cccaadc348772afe17" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="08fa24cf3fd86cc8f9b614fad9d97c1b05a7cb3f63a5a336cc6b9b60456ed5dc" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="b9467d9f5503db5b3f6aa03641660442cfec22f5282cc7e19e9b8381dec35696" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="4d6228e051989790f5914a890e6b3b4d6623a1a0e4a474b21c3907ffc7167f9e" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="e50eca35d1ecb336fee07cd776dafb94563d83213dd5eb4ba0598704b7aa5153" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="cd6fee28042d4ac25078aa8fd69042fe65888bf72d99165dee1a4229f7c9843a" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f4f68a50ad25960ff927af45ee63ee9f295e6c71c29d06984d3416083c59f0d2" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="e5f2aebab9d3ca3ad1045666fd91e6cc1f83a49364a4b03470843e34f47f2fb7" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9cea0cdfbbb431d0ccd09ccf9348d3d4e57f5e5e4270dde13e7b54458dea7d3e" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8836048abe3883f26f657ef182a7143d3d60e7395d12b735fda5922e2179b355" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="5d6785c0573051f754ecfedccb0e3357e99b10f87a0656f4a358e486dcbbd8f6" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d4e38e09edea78ffced98f42eadfdaf240de2781d6396b37e5c0195e1d4f3a75" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9bdd0aec44c10db8835ce6f5a79fd1702ce33ae66d860a64e822bff18309e8fd" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4f56f6ff469521bf25da0754220c66da08727ac106209bc6345724609211ec7b" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="e6e7f2b8e797d4b84184dc89099dc3f710ce981b50811380c9a0c5dc06547aee" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="ed0e61a696c9277139a5c080283ac7fac9d1f63dbb969a9d0277c1b059acb322" name="kernel-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="bf1b94b01098eb5f614073639164c98a0fed031394d6abef12a84c7f3b838440" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="d5a58cfa59fb9f5b9b4fd57ecef5d0b7268ed6aabb638a7cc177c80344aaa323" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="3a5d53eb6764cfc51f70bbce1a05476a683ea97448faccd2d8dd99d9e7131c3d" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="3755b62dedd2051563ee8380fee95df9c54b6cb8bf70cda22c5915fbd14370e7" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="f4ed34d3800153422faa11a8749821e3bebab34bdbfb398631d4b3cf0b1e844f" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="42574fbe75ba202f5443f7194c8fc793a9f84851a25d55b07e98552cea6b1924" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="064e836d410a709ce249829ddf81dd628320f7bcfb09c713bf3069790b9670d0" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="80a4cd1e38f47b9ec1464f0ed314cb225e7159b5aa4053840ffe67e2314866c1" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="0feb6a770a865fb25c5677c417e6656ce972df563912d10ae3c2259cd2671ce7" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="007657385642627c696dee0acfb844993fd98db0669e4d1315038b06c1a4676a" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="fc501df96cecc72b9af9cf72e63fcf04d9961e9710fd04b1ebf940a6ad900eeb" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="599cef5731581f324e2be4077a1af97045ce2bcdb47978e2a5be5b7dee182c0e" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="679af5326e078515157f207d24f5f0c5c8e7a533b88be45181be407f350a2012" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="75dcf12aac5b0c7fe0c69eb6fa7c637e182cc1a4a61c1511c5065b61435caaee" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6d0a70d47561d67586f889782bd3d0dbd58064f0936962820e61bf3a9757033d" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4274c2602acfeac4696d6e0836fbddaea26fd1f33bc5b58fee93be489338827c" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ae82c21d533255fa535decc0459d64cf2fe9ad62695d98fb1af34e56a8b40bff" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9c6e2d5117385baeb01b213fe2f803d40f4602f6ef0f2edf81f5bb5007c2f041" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d0ddb3d75464907b6abf4964e764dbd0902e3dc588d083ec1ad8d41b97e72dad" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2a966470daadceca14a87d2bd29c3cc7ae9c5910738dbf1ad3087eccbcc46284" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2dc2d888ed9e0248dd3b302e1c0b2aac835e68aa3367562c348ae83e7de0233f" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4487ed3273087bfa483497b7ee8e21b1607512a388c872ef4be99ef5e9bde135" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="05b831c51fdcfba1c233f2ab7c9b6afdea46e1516fe017227ab1ebfe857bc078" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3a84c6537fbdbc2ba9fe2d3b5b3790e328e2fc2675e2859927e410cf2f817a45" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="66bee8d4d511fc632c57edabaf2eb363f03eea7f52e8ea2c445152a2ee591718" name="kernel-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="5503dc3689a9e530829244bf5b54e2ed661d728ea542b62303c907742f36e597" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="ee7cad4d4b04b835a1c32d082b583dcf839948264a18ac0194533890c86f1f1c" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="f6219761fda3e6475ec16181229683af8d6ae43c3ec388bd546049b22e37305c" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="ed024a110c207d363bd807425a34959e8038514d604ff31f44e7bfe2436c36a9" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="b71f068d4aeafc539890f00b4dea1a90f249f258e543a4634db9ebea440a9f40" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="1eabcf69cd4ceef9a2ce8b53cfe9fbfd12f1bcaf1977bb8c1b872135a0d18a31" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="e718f0c9bac5da27e4afd457f6615dd7ed61c8e9330d74faebc395dc8b951d5b" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="fe27126a3b9e4ab3b8420d1b69bdefb085d0ea8795d8db7f3726a3efac8a3ad6" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="10e3f96582594d2d1675b6dff9a670b8ec1f7db068fa7c27c731ba0e8dcb62a0" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="9f874ea1cd155ae149cb3aaa9057bd6c2517c331c236a785d07e20e70df14107" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="21b8eb72e6bc075ee8dc74457507e2941d26ab6ec82ae57ac42fc6ec919f9f91" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="e9c72e2e66630d5948169eb0ab9fc9fc7f4152c4231f2eacb79a43d97353dd44" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="92b55ec526592667add8248032302fdf8504c13c8115b6dfeff1e52c33b17988" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1cc4794917ba68bf8b0515c67a6905c291734467fd32a8af19e5d15017e355b3" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="90eb6e912cf606bde99970d6a068c179cf8e89c99e9fea457a20564f60b2b19b" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="cda4cf2ac171c01e52841f662608c4a5f8650d284888783db0e2a04f8cb19084" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4295708656939e14151c57b8dbf3d516700cfa2e264d05f7f3ebd17622b5a442" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0eed84c3c0ee460d6070e98367dcb685188af02aa5ec2f8110213ed008643263" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4d45252a4121829b736b3276fe8c361fabc45cfeea031650dfacebca64dfc521" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0d11e2da4d6d62e79b6f055ae11f18bc6d945baa3b1c0a13ef25f20189474e11" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="bd53e0dfad1d2ab77673e0995e79ad23feedb8f13e5b8d3d613b8f5a2bd9a96f" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="14c3683f54041ac97e0dfb54447aaed026409d6a3ec142709e84a5394f53542c" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="36faca894c62ab03dbd179d5d73c8d1ab2a9a53886fbe536b43c0c471a2f52b7" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="12076a978ba9afda2ab4c096f3fdaa90d88c8ab384b629640f7d2c15ee461806" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="be575ed5deeb1f84b968c7c33a3767979e88eae343aae4373729914d084ff9cd" name="kernel-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="b60f48c8bedb71f826649da860b7394bb48dada8d0edef1c5ec6eb9e1780534b" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="6f097a1b4aab7aed002efeeb9fefa135b1a0916c523fae4eb21f5699ede7b2c0" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="b2ca6c711216dda459a176518e9e504dd00daa678ac86477f908597677b69d30" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="28dd1b40f99e4004bf0866cad96b6fbe8d617bc0afb42d5f548740f5ad6de06a" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="e01eadd8d3186992dcc898beb650ca6da98b54e161dd3cbc2ef73c3a9014b62a" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="a2f1417d53b5917e12916cd9a2b0ab8fb327bda8ce144f369e26f8eda8322900" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="b45e4de16794aa64bc07a4b14dc233677856297194cabce67f5445843c9e9523" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="be42f786df37b691723e39c80537190d91700975f95e8fdde68493c7c0ac57a2" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="fb518f37e985701e92f252fee468d6fe4c4048eae33a47161352856d1ce36cbe" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="8e19475f2927e66d0bac0247e444b1b0d27f4b78ffbfb2a9c20ccf21d85c31a6" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="fe89334525a80e41e66ca1245d7e651a1b63c16e088ba67b39ae0b1b44ea7f0c" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="1fdde012e8a687eaeceeb528edaec635fa075635eaa707ae2ce369610f085b72" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="15d4ea082d4159b666add61b1e848e82369a2e9b2022f31b899fc8b1a4a67bb9" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="81a4ed1264ae6009dc0ea1b041904568d2d5180ee9f088e7f3c9b8b72237924e" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f1bec8a3320cd0a779c71e2ed375b7552bcd901ec164047db1a19c2e5db6cebe" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="366d4c4be43fc2dd77f81bf57ad73d6bfce2301594bdf140660492b1dad39a70" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b52cf939155662c25d39e8b5fdb6fb4d164db958c01497e9b498551a2807d17b" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1216d861fba63e57d57c67023d75cffc2bf8347ce9f6d95f84ca5d83c8758db9" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="add27dea0fd8f325e835bfbccbbc6663c5f3b008db2142c54cbfa48bcd1e989a" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9c3927ee9fc6eaa098a1680d95613a18381d08fd383ca21c9aad3cc73126712f" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="093c9c892719a93d2e859b3a2ad5108cce74a57596bc2e383476e5f7ccbde18f" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c288fe11042e42375e01cdbb8df7562cd14a72f7489298a46caf5148a6cfd9cb" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="24b49f8a0c1c3c373955d57a1332ccda11113e9e1c1d8454051ff17fa6f22ba8" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7efea23200ba575024dd7be9b236c43f1137f7eca64735954950e8c8712a4347" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="e2993d72a463d13e16f84ddb77578f9ce1b11f994ccc53352d19c6571bf205f9" name="kernel-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="68ef86a7b0c65da1f8139b9b4cd5f8371fb53dd2b6e8900146738c293cd88565" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="831e71b6e0676e07da13fb2d94d4536c0a58bbd6ba53504fefc1e12a1a2b422b" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="726609505230d10cd316def23d5120ad58265e96f40b9699b540623fa252d3ad" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="49aa817b682c5c0230dd7cdbae4865decd67f750048c48132d12c64ef73627f2" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="8232c030905f61d223bab2c50e675273998b019d4969cde147b87162bc4350f0" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="9e377101db9ab944c3b52ae2fba07eb063a1e8d64b554b0026bd648e0083987c" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="b057c779fbf8ec612219f5925781826dcb24a9c57b4d98a532e4945676c302a6" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="18e17a7990d862d2d7562cf4f3a40da5fd98fa4e41d833d5420e164765060d5f" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="913e7ea31f248c3608919fd86c36f9a4f2d7dbd68734fb678a0a64cba5ad9cc2" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="ceb37ab1a680782299b8bfd987709d26d8eb311fa86e6cd5773a07a246d565c0" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="6d0adcef7bf9022f8cbfd80a47fec6d97500960ff4a2b398b6d2d3ab345e66df" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="8bf921b1c3885d03ab8ab62ec1f06412597f0bac9696cacb20bca824bf1aaa0e" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="be6b6701e97750cce076629ccee0e4421cd2b5c76bba124e83b499e298be0d8c" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1425f6dcf8cac3ba7b07fd87942e08d913dd817607cf32ef23ec156fae379c1a" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="64ce8d54dd9f2ba6cf48b9a6c8ae34e76db673b3d89bfbf29374363e288b0007" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="327fba7968768018afd480730a92404fdeeca47613cd9a57d9c225ed80f29392" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7f71b126b52bde5bd66ef67b01b85f4d5782e194080d78364e56cc74125ee42b" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f8e6862f88eee3f9201b571841e22283da4be6f4ee6b3d8f62603d0823861b38" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2409176bcc53ef70e3f037adc4378c848acedf8b84e45385ca393b64c51271f3" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="01d0598c41905b383e8ce0e3cfa01068ab60dcf31513d70332575a5b86b6558f" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f2d64c0e70b47fd0c767bde96a705ae244a68eee906053d3b236a226884d7fa8" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="19742861a0c2a47f0f50400c7f49859ed564361335196cd6c833acf79331c196" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9ca85644bc581f065b044cb668c8cce13f264f90f6bd58756638e267bd7a5823" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="50f73266e858ba9db02b1244e9b99b2647c4d7a5138f46a384db7aecbc9a5bba" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="857e43993a1c37ebeaa59764bf76909d0fe8ab995a0cc86ebe640043ea4fb044" name="kernel-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="f2ccffcee08e2a07f98177bad8a7f21c140b362391ef5161d800a6aa3688fd33" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="dd65b135b119da2f2056209ef588cb9ea7901d4bf9298c2c0f27ea5cda9546d6" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="3ef49d26f68da425b53a701373235babc5adff8151349db600ca4fb8301de4d1" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="de1fa14db7f7cec6816bae8b022ff242d91f563e941675f9e88fc846315656e9" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="9bb9839a26a1afd4fa6c657d14e9dafa5b7373d4aaa7766b7644abecafdff994" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="bc297d7674be7798187051715fafdde4b374dea8157b5c03e5140194af229760" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="479d8ff0f1f193f579b7b52dd954cfd3eef43fea4726c3774a88bc14cbc64430" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="a9aee5e920e7ca92e8c027ac6a846b274572a660ba6e892862e4753b0b1ef23b" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="cc80c2ca60a78cfde626f70c392decd4bdd3858e03e9a5e7e5468108b1fc778a" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="ade7507d1b6d6630d25d9be89112341e4929ebec988e0e99d78b8bd7a3f207d5" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="1f53a5dd47bca26a89d2132a87441cfcfdb80bcae963bf4448be6bdf1e937d14" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="ff44c1c6279385042857cdaf46fdd109135fbec5cec3e05f1630144971fbf5b0" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="ceea3407d4789b90bcb44a1555850d045ecb8dc607666412f5fe522abd473f83" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="e3eda9cf7b0fe22bcfc91141831212f3a382c490ee8267ef3377b3809cf23b1d" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ff0eec35796bc09e4c0f44cd3fea1528db6bcd8e43c6e20aaca08aaa9f9e40b2" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="24ef42122a285a2f0921501d2c065d3895be1b57a77efb883e17b0cda2c84486" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6e0d846830bc1e922046795437fe277fb31d547d23bb65bc21b566b2f7bc1d5a" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9be608c61424bc172eb5ba488f0158981de94889c7fdedf6e65e916d0f69c613" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="76df67e7331404af16d5a5c12cfd59358e8d09264865cb20ce9f2b1822857c76" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7799eb466e9a1186939ace7e904aba28e83b36658ac30f4b6816c027de02f6e4" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c7a817839a341957f97c1ea0d1fc8c5db7b461e03041223fdf455a4a77283faa" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4231e4f14fa7e471b93c8c61ab9c701776d7a53f1f8095299b5c0c5ff8fcc776" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="061172501dd7f362fc822dfe1775eb0521f6d9714f057d598e7280842a6a97e1" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f21d8b4c852c1feced4dd8e140470324b170333e84b615cfcbbe2967c419ba6a" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="a56ef2868ac09e21a0b2d27caabbf251cc1a680f350fc038406f6e77300268a0" name="kernel-rt" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="a40c5dec9845912439aa162928031e292201ffe7891b7cc136ddd75711e32a3a" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="fa1280511686e95606111d5f8e5b126cb0b2133f0dcc75037ac5884959d49acc" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="a4c70ac9b8ae43ce61ddaa54b664df70628ebb6f834eb49f643bc0680ee0405b" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="57a2863e1eb7fadfccd2bf17d725e33998ea7ff5d50238b1f558a3f42e2b2c3a" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="e4b80923256d956685b089d43a85828d0c78f5d76577e5dab4998d12e663c729" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="0d3f51ee07ed785b15c3490410d4a596256857327fee2118283a928369ecfa5d" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="4d3072f5f968d3848361bd4b94b15778b051b6fd4dd24056f73196e12ef41c54" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="11cc16c709d9b92029805bb0174f9a1bbf15b1ff69be4f8a0930793594a00512" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="69b011dc0fa50feb6a05366ed08ea259c86036049807aacb840fc707616b5c1a" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="0cb1a5182e7d4aab39bd143c88059b0043ca89bd419e56e182f176f1616df472" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="f4f818e1c22ae3d9dd28c715714f775755a0d0b5e7b77d4ba88f34b9f2d6b614" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="655c3cf87093aada08b49915f3c1bcf36d1526cb0566a365b4bac2467318d147" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="2abba0a08d3006343986760593b2cfd3e0c052efcb601580ef2041b55c29b032" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b76f9f9685b149d576630e809de079d49cc2cefe8f5854494a96449b2e191f28" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a16adf9ead0442aff0e92eb280b708ea01adb927a8300b62de6ed0e95047ffcd" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f1e89a1ef56ae244efcac2d4468eaecb946227293f769b1a8601040758ddabe9" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="45120be079fbf56f32356f2fa209dc114906310b28be13e8c8ba9ef40a2edabd" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ee0df683b045652e11c0c79f963b5e2a2b0e51fb40ccc73f5208519bfa72e719" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3fb1fcdc621c70187c0cb5362b813b334d9e1f0f827ad85c007558e1b800f81e" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1e1207715500f8de5d07a25956923afa5ad35ee59cf4acac2726e9e97be19e92" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="dbeb08a918d005ed4fd2720687c147773a330b421da942e642c696fefd589833" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="dd0c44b7a11d7dbc31dffa65a1083b7793e3f744695d03ed28e6cc5636df0ae2" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="79b1d48b7d3a56c0f20f0bfa11cfa3446234356aa69246dcc7ce7ff9f98d6000" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6165fcf8e49edf3c9098b7ddfb845cfd23642621d784301f774fc81c7d16be23" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="be01f49c005d8184735660ee6fc9d134e26e8db6e14db7de58f3fa8e330889fa" name="kernel-rt-64k" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="b4dca2a382fb857e508e40357a0a96af98f06b56a157d3e4354e0ed2cbba167f" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="fe92e0e1f6f6131ac64d85e1b41631e4382264ed3330df1d0a514556ee384206" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="3739a7f67171624812d5d30ea9ff4516743e4c7d14cba2dd397fc9addeec6fa5" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="0923c0fa87c6479003a866af06992c72c71e9c203e20c4d425c115320f84ffda" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="cbefd7d50e7678491d2e012daa7d77a9ea9613444f50ddd10a72094bac7527c0" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="c354ce331af302edc0253aff6ccc27c6009569d44c265314b3467c4f2eca8c30" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="01d3f03aa529ac179c9c832136cd984945e8e223e5dc9c876c625fbfed8da1da" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="496ee0478f1cc46c8bccb890ab19a946f5a38df87326966f4e1cf1e2a2def4a5" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="15101b055e07d4ca156d894d1d58ff0be063537065389d8a8e806691d78ab3a8" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="046ad6b969de56cbc428c468ddd8b2750baa7dbc01785b4fd1a1a89c37d222b5" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="900ebd7207f85051c73d801c2fe4c8df46225a1ab679eaf5fb864a75889a08f0" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="7a07abcb00e775c596212e7bfb6bd0134fa455d394fca809c4c5a2122dca2f90" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="f8d5c449e75d551eecd67967bb6d84434fc136fa227fc38dea7e729e6a5c8bd9" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="53bd4bbde83fd686f252845a3635af332a7f4d9256183a4dfce1c663c0f5b5cf" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="78afe8e676793cb86f9b847ed842a64df78c2b227685f734769c4779cb8b908c" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="42dd2c9d06049159d1bed8bc8cc5dcb6a9918d96e49750d12a1efdbe3bc8e963" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="18dbe253fb5a763bcb6228566aa69278c20d02b36f071ba20ad256170734ccc2" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="288c6184477bee0860f5844156d23ff20a04c0aba7b57226e1a79b8d48c25a1f" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1524fa4aca22f844e735cf2c2bab89a4515c5fd93412b6919bb37fb0e514236c" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9a983db8c24b2644b9fac17e374a4eb3a6a83cf3601ffe1d229674eb7c7d4ff7" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="bb4ff558d9f05697bd5e71f981b775e78baa6a168c36a9b4a1bd25f9a2e6de51" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="fd789c87611a7a179a143cb93d41ec25b79d52d6c2e8d87e5432d3ae7e643c2d" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3e90e54eb42988f71ff1d44b2881a90d14c5f8fe3bf981ec9fc23fad04a6d9b3" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d4ce952cef61ad295b5b208bd6702372ee27bdc3fa4686b0af89f89f1f18ecfa" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="4a7c6a535c2d27a13d87f7839429f544c7d5ccc13b962ecfc7a0798b66aa5a17" name="kernel-rt-64k-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="d8da591e022b454725a609f6204c7428c807404142e920164dadecc3e2beb044" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="8db2d38dd2ba28071c760267a779b6db975f94af7500f44cac3cabadc9b42316" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="c2d03fd5889681aa152afe0d9d2ceb38434b17444baf25a20833496ad69664ba" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="02be92911e48830a8e7afd91b0c8b8c2a06fdd2517acd17963f01b8689bc9199" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="1575951d3236602c76ed4391747d58d1f0c559ad1be8aa3ce3e6d09de42e1e32" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="b3e046bcaada06b8e39fe313639c252067f096712e8b44f67b511f48de5e7c5e" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="f807854fd509400c73eef8d777ca95d8f4c509ee13f5c5b9e2838d06bed2660a" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="c31aafcf9ea48aa6105a1943f18fa565b73c7d9cc217f26cb41ee36ad36595d9" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="84b5009583042de387e4712b903739d9aab728c895d392eb2d5e030ce6323584" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="d24d5ec5a85e03d1158bd6b1d51c3fcf780cdbabcad79c724f4d58cd628035f1" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="d06aa802eac0e2d806ee3348590c09fc1ca6c36573b4eab26b80b981004f6b14" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="3aaef34ae27197f6d61dbf6d717d5c1cefba6b0ca9e4c0b72e248e8ac7646243" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="96fd93947407be63d0b811400a5138b93d55cb177dc5e05d9bb17c896ca8987c" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b4244be30f0c0e7bde10a1c4885c0681af00cdf687ccc2ff42125e4d478a52dc" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="540e3bf4d41f9973867b1bcfdd7b95f8e6bcfc5242bfed2af3abb845a5ba97d5" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b4e3450ba4fb138ab8c7bbddefb2c51f57313e5b31207b67ed0e56f6f87fd78d" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="97fd21348c5d604edf8728992f240a5698f9febfd670386788f46980c7f7a3b8" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7f9cfe56aba937cbdba3881b1cc4ce80b097c9873a3944ba9fee20e4040da6ce" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="207b47282c2af4cd31836f186b17108cff169fa72f93beb6b396b2930d60adb4" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0db435531b3b6241b7ecd8f2ef4425e8bd22af1b46399221f42b0669bda23d2e" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="30db266f114fe055795631eb20aa9c4272df6a30a1a02c7f5b8bd373afc8788e" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8d5547c9a95d3cdff92490eae3e631b0afce7877ffeb91f4331ffe3de21fb618" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="746c0e59e644a4a88fcb6b8649dff48468bbae15719b75049c84b72d1f963ea8" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="69661d375da23fb7b428aefdc1dfa72a76b967b7f41b36de437731a33f90635a" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="c89698db4dad93f2131065ad6049c736ac875582acc7b29200c486dddb67cc92" name="kernel-rt-64k-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="47773472bfa7db7efbb9fdbe6a8190d6671c3199bfc450336be3e435abac4239" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="349dd00f68d6c033baa7172708756778343cb7682931e7be5937ceaa7e5f1aa0" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="a4a70198012a569886ff3662a08ae55617572de71f7da9a37303c627b820a515" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="f3075f0cf15d69a0212a5f46e485fb6147bf183621693e81e1262ca3dbe9ea5a" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="06d0152e643bc5d1a7d8e4133f8808d4197595d7925ee1e2958cd143d125b208" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="97619965ff347295eff6fa7b3c6fec73c85276ebea45530a1040451c175840ac" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="4fef5e84f64f17ec8880ac92696b2766516ed55523c927b0e6264a8e1e36b31d" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="a1aced7e483156342b6d7597b7c5647f9b088eb4e25dfeaf218163a53743b20b" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="c8769f02967a762ce0790b7663804dc6385751c86cc03fc265f253f54d7ec48c" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="49f26ebdaf5065d72c9c176dc6550f8fa34495196823c97e6677925127e71c07" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="6daf8919170d18bd6d284dc3ff2cd9f6071c28ef2e933de834e11d1c26ed137d" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="e2f84191ece45a69cf2d2fb3bfd8fe033801885adfb96200ca6496a575110fe5" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="44cf1f8f28d16604f16577c678d5d8e70f50224f2b78f2be480316a0dfd88728" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6bf6a6519b5d315b7064099aa62b7ce1465b8325fc73eedfa274aed4a53ef9fd" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2d710f3fddd93fa1c91eb0dce26dc9999c08aaff765f8bdbd237bf9a7043f2f4" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4a2c2c9d14fdf1d67f6178bc25e18fb46ed99fac0ca4f94ce624acc07b6677ff" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="af5d32263d0e40db68a30c38486b6dc197cf98d4c2dc4445f169421ed94b84fb" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="bca80383dc3b07b093b03ce3d0b8141685b3ed9ff4612311a2915f40ec667045" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="927139c5eac9cec27d805dca5569475ef92e7ffe4e31265150421f7cc179946c" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a863006ee954bcd801a8452505e24f8ff5ef4b994b87892ce380c46cc0348450" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c2e0d8b7ff216a8bff1e827a7efef2ced908df3144db8048a701ea08c6554239" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2b68faa00c3257b91acf3e4b9e5dde718d25a57cec0bd53f931d3b868361a9e5" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c5b2500d9379fc313193eb482345a38adaceac20b25838d0d7f77ae2455c9d08" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="712a3b9cb897ad01e52f651dcbd5511a02f8605a42557b87097b0df9b79f8180" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="2bc2c5303a14cbe1c0a06d57699d10bbf7c612685baeb40b63dce390b8da23db" name="kernel-rt-64k-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="628f9e18ea5288eacc194bc7458f4b16ec6037dd0c8903e8f183773c389ea06a" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="5ebf20202b6ba0cfc01a1405366d4b7693f5fbd0356e362d617d672ead505478" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="b0c10042d974bc75203e830a8773cf350c40a6d96c484f3fc030b4e14556c8e6" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="e8570f766e7e14aef52a248ce8e051e4d5d4cfb5d75f69a03027b36a8bde3590" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="759b56ce12f31bba8e83370d8e2d64de987b3bf13e63518b4d7209f2d2ca7973" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="819c26ef70157ec7730241e7253518571c719212958b4f5b7c1057e0163b4030" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="371d6aff0d3ea7a15fafc87ce430da5aea5b8efd5091237c770458796baa06ea" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="bbad1178f2d880739d742a555b5fee8c319422e08e8fe0bed4eb4cb540f7584e" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="e4017493c4410e6809fe1c5b685e5027433cdab23f06f2cc6f7b0c7350c07f40" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="4679a33f748ed6b5976b0f8c9fb47ed05083f4100ca9f42e999188e6043f3db7" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="08c17a50094cac8ed84ece15f1e45893aceca949d31fe6562d4a04ac982b2415" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="a7ec650b673784f7bf9abd702b600433e4c03bd9cfc298f49e94023f48864b55" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="cef1619a8c32d91071bede7ec1d91d718f7a21b68a0950b2380a34af2bbc615f" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c5ecc783c60b1d2391a46cdabeefcd5e10f8830940f444de6b03af16e4820631" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a41b8bd3ae3c0cfaa9543950aa260629407c6de074b7b2b47704a5a9d067faa8" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4aee876bb881bdc61c7704fa54f0cbd1c1ad20201eb92c0e4a3ed200b024e988" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="036d461c2a672ae88ea20439c823bf73440da7ee559b4c132fa107f4adf963e6" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="298596e97c55e96875c464568cdc1ee2a8d28fcbcccaf5e28251f9d759d04784" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ebb0612aeb3561939b4e70cfc52ec5b87c076cd093058385a79da681d684ac14" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="cdcebfa1c6d7bafbde184700f238f6804276150a566244da1310c463796e2dd5" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="de1723939c48149993837e53d9941336515cf29923d9016ede3ad94b403dfc52" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="711d9ccbffaeae5459bff1c83244dc4117295245e85d30e015aa935423deb7e3" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="61bf6aac669d2ba65ad7a33064bb2afed964a44222df77f0536d1fc9d50942ef" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="543075a0d2a7dd5cb510181f7f768816f89593c8a7ad026d46c389562add094b" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="82db7829a9fbd4d1230118626fbd27f15dc12a00c8f2f102293fb5094a04d73e" name="kernel-rt-64k-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="ab61e702004c534cd44e124ad4dfe1929f91cef8a71a843e43c706f25f83c0b8" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="eb1e30ed0fa71beed79ec6276016be3d93479a706bda3baa0f6e319d8aaae1a0" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="a73b72ccac7054c9a2f249df63dc5f3f06cce475e93f326e22aeaef87a3c20dd" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="d0eac161a73d67a1cc1102a94eba1f12d5e3c60ccf71ffd60157f20418e0c943" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="59edd25495d99e0bbde079f135be2b3f7465ad609b1e725744e36cb321185d38" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="96761edbee87f7878ba329f24d83ea530dbc9e18285d3395673eae63f10b72df" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="d78919cca4a5d4aee1fda954a6a1ef4096535b1f76245d782ff75aa780f6bd5f" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="8c783131f8a2ccb2606be411b9401512657c4778066345fb60cf7ac304c2b3a3" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="3352c4cc1d0575b762e0df8601cd2d1cfee7c07c3a5d9914f6f622402d194ef1" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="56926ae83e398c21399e64d6cb76194ff7baa75d17fee6fd7b138bf662bd2194" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="f1d8dd5f29f78cece293a16e006c8456ecc8b3fc5b9614ceb45b95f1d3f93f53" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="e747fb1fbb7c000d3212990b54a94bb8d411295cd21fe0176cbf7a1bff494c6a" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="f59089b81a5512ccce5e2114ad5fb29c6fe5f5a7ec93cfc8929afb1f44e5e71c" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4c3e940e12adcf32c618d3d73d96c59e6277ca8f436fe19bfbf2f0097d80e2ff" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0b29e86fd7d3cd9cd824e1f1e563aecf385ba54881b174d0eccccbbbf6110768" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c381dd9fd31ba7a44156ed66db74f36bfc9e29c5492da6d5b10921752987cee2" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="206e649710aa963c64f17994b49d7af48856ebf05349b92f104a892d95f7e342" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="235587842f9f948378dcd5a65dbdb468e31699bbe26a30592e5d597e1cb36e85" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0950042e921be2741624986a9dc294a53161248273d39959e68be172405d2428" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="46258eb1e60477ecb60f57b24f1f497ab368f24dc2af9512a0242d381360aae7" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="83395081e2ae6249802f7a7a9a1be0cd70524519226e405ad5cedb26249535fd" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3b99870ed8e879732481587a9ba0e505a735b5630d20bb9b7ded5e6ca6e3a0f4" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2368f04253e17c8fe40e47f7721de5898b7e49a44bfaef1baa4c389197940dfc" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="5311c0b0cf531aceb37814808e62834381541389ba65054b35c4f96b035977f6" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="0227fed485431dff2a3997d74faceac3839be9e8bf1bb1926c7d0f76267fbfcf" name="kernel-rt-64k-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="38897143ea92e442e89768755d2af015f58932c294e1c0114791f54052e02ae4" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="a4d25c77e01ddf79a93da0b23816e3352bfc189af0c111f424b113a05ab89b87" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="43d71e7b4952aa99d64c239dcc1d5a525703b7f451995497482983a2625bc458" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="2a8cc89684ea78de252cd7694e8dd9ec52cfa8042bf11c4fb628d8445059dd10" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="4c828eb03a3baf06ccf5a3add8c04b88acc8d156ef7f298f059c4a34f6e6d2a7" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="b693ce9c2b2edbb98d0b82aeb823eb3f9a3691b6469e08dd141f3b3f86e7ed21" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="b3227b7f157028462222403c29ac73c115f9e0a53e0b13d7a38d4b2b69728a38" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="12d64e9b791b19953bb563776ca346165c16c5b6a972d523ff3128a4b564f097" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="255a1bd683ccf8c7ed4cc22557eafdbbdf1e39b0405a96ca18b455b1634e26ee" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="32e59dfbf2fc6b783b006e629d39587a6296c0dd6ca37b789eaf8a94c0ef9c70" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="02ed4b256954af39ee4cbb3a5694dccce27ae460b13c05593decafdb4dffc35b" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="5cd7eac397ea4a931b15967db450077c15775fe548fed77ea98a00623771d515" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="4c33f8fcbe93b37f5ede8795f57772fa144e84c8d7043f8be4d10b67a1b28df6" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b1ba5b9cce17d1b5ff89d50be03af6d1608a9d12422b1b6ebf0669549812c5ae" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="18c4f517ea5f4d8956c90f111b71ad657a35d71241285e5825b8df0226dcd4f5" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="61754ff70a06e9fcdf8aa6ca45e8021028d6ed2e350e3090ae585f21dd50575b" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="74b7c5046065ea8ad480a4029aff71edac4a51bdcf8ef3a72b8de70ab53bae35" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ed491e24086a53aa088df4a28395780445306a2fd5887bcf4af95b687f289c32" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6559dde82edf4621090c969bc37cad84be72844ee9c13334ea23c16ccf9ad6bf" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="990f5afcb119c684905a0f736945af4aacdf526332b978ce7172c1bef7c22e28" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="39d123c4771574112d98318b0a2f0a37f3da270212b2ddde4f4fa23a316aff44" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d3062ddcab98ed2186dd3906a6dfc9d01c280926822d2da9cd86b6a582d3bc35" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="50e358399667c339c570974d431053fa6a97945cd15107cc0b037defad05eb11" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="869e8df9c83860606ec277bbaade7bef122d092f8a753f1de4c98c6e7b15a653" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="d30af15f0e235728e920f6838c42aa0b98f93c99c5bf0d2e031cc92f5438b22c" name="kernel-rt-64k-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="62e311b99f0f34341e4f030e62da58ac81f67b249821dffa0bcb2f5337d97b14" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="99671b01eec2f989601f6f37a83cd6fcb338c051004a064f853f1832c8faed77" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="e3909bbd6cf721e2ed629c9a5c88963597dd727b72c73fa571b618e025c67ece" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="08469141fbdbfcfbb3999b1c665aa1d166cb2a746f91f385ef7012c30dba0282" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="1fdc6ffc654eb3d963178ff6471041f97afd568fa49a56fcf1d063485a744bde" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="eadbd7d1f919cb2a90de3772502638c959a939bce73e5e68dcc0bfd4c6732361" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="b45f331dff99dadaed753eaec7b9cfe9483349cd2e9f368979cfa564abba4b26" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="71d3909ac000c6b7a6ca2cba15936120fc708bd272462a0bb4e367f36469100a" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="9bf0eda04c31ec0a412959988cfbd9001fef2e0cb2c76132cebc4ebcb9169ce9" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="c5cf2b2dad0c24f853db635ceb3750ebc885538308b5ba241457249425cf1f1c" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="0ddc6d1e9d16ca02c568769a9f1c753ea2752448be2f71673d55f3a40c564a57" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="5a11cdcfab1d779d9a77adcf87d4d4d9270bc0cd36e3fdb4a783fafc1be94efa" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="8df7a28ff47ab8b83e3169476714c78f0706c023fc13658f2345c3edec3bfb7e" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="37b307b28e5db9c9a8a7c9169a6a7baa82ddf6ce3140527ded548ed0a07a6126" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="17f69c053f46b8956065d1a1a6ec9b6a4d33a6184502b7cf882d57a2324cf7de" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0e4b8227cea7d39c03fee59f08e9c169dc2094f191e925e64d9966b9c88ec5ec" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="05fc75d32f7df011565258384c6efe20b851bfe9e6ae3cbde002ce911656397d" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="71c8f1e9c3151eaa2c603fc1f6ee8fd8b8c9a61767339a307fdbaf8c24f9440b" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b7bb5551dc803ec8f8f025706afe691a6a0e95ddbada94b8c5d05273d24f6f89" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7f04b808e571e55ebfe9f473bbe9676df5bb81cd2e176a9371c3e67164337153" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="e21fd79966b847d42f6ecf62ae25b0f4e44be4b93e0250ae1e1d2d4eb847b5a7" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="70a018cc57c994bec84d751113c01dd788748f0c28ffe9c860a0c0449eb29a1b" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7e0eab9d54c4c17556b9173b1c8d906ad6ab06adea6e44a1439ea437f58a1cb2" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="44cac83acdac40afbbe0ed3d25778bc40eb22389df1bc268c2a8b5a314a8f4f3" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="ec69b226af61133b34e3562c3470e39ad9566374958db3627e8924c05cfe0a18" name="kernel-rt-64k-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="eb2ad0b5c89f956cb294fd911b1be5fdf52826e6dc2cd31bc0701c80a1e9231c" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="804b5febfc9722d73276432412357af6ab85035167a0af3479a771703a42ecd7" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="0a9e596394a70e26148d7b124e33cdc3564950cf050197c1abede7ff8a7e5fb5" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="e1a4b05669e0636a7978c8be3580441958c83246de241e1b47dc6a4f92c395bc" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="297813ad86647c1688b8bebb5b642fbb346fccfd37f210b80aef7059358a4b27" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="ba4a542ef7209e0f5eb95b5f4a31d8f7fbf77b76266e6a43fd2083586262b62d" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="ecdff1f12ec77054df08855af6ac159c842b64bf10a7c6c35bdfeb5abe94df60" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="d5c255945257f42145f136b632ab035fe51fd0b693231fafbe108ff0fee8d701" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="72fc353f66a7560168818c04ec09d78bfd37b3f8d9172f858b91158fe913deed" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="4dd6808c4d29fb649c1f904dad244f4e5abbc12dbb3e51b4eb1423761572d2b2" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="cd1d190f3d3ce2963cba3a1f1d5b84e0bf115556bff1e860785ce34b999c3a57" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="b5c92dffd654ae19d3f37a988a97cf7ccecaa1bbe7b2aa85f7c3795620e76450" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="8a3a50f0ba9827d77b6a8d080e66aacc6f15dce476301860f37ed0f9196c243d" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="321eb38eb57b10ce09ad41cec07afcf458e438b0f191c49b8ba29f6f1e275749" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6930f8a144241532f4a08e5a1d1c59c2bb249666f187bf2a8d02d4383e2da70f" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4cf68fa64f508cc28ebaa4649eba9920446841e3e6f2f0d9d75f90e3e9b4c740" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="deb90c9ef8f3594bb858f1a97611e6e38b9a5b70eef66755e7f7ece5539c8c96" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2b50ea26bf41fb46c6dff4e8aa8ac7b3e26614a8ae40d46bf624b6204a9bde35" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4ac37e1b110fdf83d7f29e4c7b8500a72d6bb1e4b408040001a8c124e384365e" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7e4104fb65ae434ab27937ef544c5af24bd2585c64b3444d0cc1f70d5d17191e" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8dca3c8da37ca23ec12193f57e92b592b918b9502244ae13ad0bd4b392240cbd" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9b8f3b644c04a5afa578aacd536d9f3868af9b5b4a758a62b63c4b1954ae95cb" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="19a34684e942cd6a5ac6d9eab2a74cf1011bbeff59830d5ae1ac60cefa031c7e" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9be298287cd6554684e253c19f982432c63b2733281b8029a797991ee95bc7df" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="1d46bbd545fac77e7b0bee4e45ca914883e475c8c0f4d706ccab8c15c69d0939" name="kernel-rt-64k-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="64164c6d40976fdd3472c2548c1a896d01a032c34704d5f27958ec5fdab6eeec" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="af478107dbc31be324b10375d3a19519d907792231f737cf3d6aee643da14e08" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="14efe95d6211df589965882eac7415b8c5d63e981068d0b9f50a40947684a326" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="a5e08782b7a687aef0fd73dd72e9d17855210ec927b437bfdf05f640d407c264" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="64eef40a676000a186a9ee34428f3c8b88ce40884ada2f7f3e0db3d390fd4982" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="443062915ba693a3397746b6009e78c26dcf5204fe88338960d23b5b1040e0e8" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="7899d8ad569f38e7e32971bd4fbc04cadd118b42131ac9e56976bf66cc5f69c6" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="c0bbc7a6d9e2833c07f1e5e9ead2f19af0860940770d18ebd100ad4cac4a9fa9" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="e4fc57d3f5bf2bf9965385a4f9a98b3a5cc75df5358a81b49f6be2e9a9e12574" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="f6eb1de2ba0168a95b76d62fe223f9b4a6363438ca538ff97ab043aa29515218" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="e5d9c9390033603120b84722de89b78428d2b377a7e7c8cc02dbe79e408d79b0" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="181c017a73ba4881ae7e0a47e85e564c24a33b27360e6eaf6d227a52d394c59e" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="057a12a95523be20fde2e4f39d0d51c92f07c94d2ee36afa78a69f6ecfd6dada" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="bb0e1fee56d15bd1f369f599b57fd6071cc148f71ec8765363d0ee4c30b05086" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="99fed8ed3f03f6d4396582e657684971bde0d51e94e105ca5a0972209abb1f7a" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8d19d3236bead3a769aabc3770586a965698ca85d2967dad5450ce09e01671d6" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="325fe8b0a8eda487f2046db2737c7b981f07758c8fe802e9e8754400ae3f3e52" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d133c586ef9b2872e94b36dbd5252bce7a88004e3945be5dd0cfcd1188ba9336" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="28c3a297a3ad34855603be36429e08c94f2781c10424468e2e512fc5917e4ef0" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="411e44b253b0061c1d77bc19a372af3ef587bc1cb16cf00864a00588d9256cd0" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="963488d2037ee534f29d2110166c697ad30ddabc450a2a670ce0d52e7e9c55b4" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0e42e0fdd7ac5a8a53f1b623d613e95078f1dcc22c16cc35bcba9b020630d54f" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3980a0835d88b8d77154983a0991c80b2f17b608041897484beb53d30d0c8de0" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="02d7136f48ff6f1dfd5d42b6bbb70af7ae9f9d08056ec35e17f93fe025565221" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="f26d6001b4743435647013cfeed6b481b8731943bca97f87db060f4fafcc6f22" name="kernel-rt-64k-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="339abe5c01aad2b5bc0e053e3ee231ddb869cc6a8c2606debfd54c34ba9fb5f1" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="6fe220e232e1b37d881e75352b84e08e907068823b419a94ce40a4b82576b88b" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="b72f2b04cc552d8fdde9325d212d5c88d06ee3c6f3fab6f7cd83e861f8812a59" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="0fee5521563ba78ee888a31aea64eae342ee243b615c7794323ce58aab33adef" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="849d12904596c1a1b7c3afbc081feeb0df99f9784d26225a4945cbc22ec6b043" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="2467f2578653778d7cee1e46dc5aa1735816acaf9fbca8167115bb3cb0296c26" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="f6c3dd306b66e9b490b46e65396052ad010a3e3ed7583087a689003332ace054" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="b4096408af39c5cb150b1e36c7ee44eba4c620179ee5797e376e8f0ec2f8acc6" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="92760094682e40d6250bf32b11c741a4c16812e15d7d57ef393fc99e8ffc42c5" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="7fcd9e17a3ef070dbc28c668f87b6d857d01c59c098eba3de07870d035a71dd7" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="8b701192ec135673920bbac7f6a71163a9186910c9bc93c15260fa44f32d3bbb" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="c95177ee89052efb9d4acad74ab1a01dfb3dffd48e2c703894d7eb42cf83362f" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="f844762ff288e5da09f1449c88395bfdf7fb3aeeb6f94c9def796aa651c04304" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="31c0ade121505c89223145b12f40852cf6d11272b043fccb481dfae89de65483" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="af3b4c0fb77e1208b113778bf49881e5e5bbe54e42deb5287d9496918965eddd" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0bf2f8173db3fa4eeea7405f2e8bbafd601e5630c864841f38afa247ee3738a9" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f598c4c578945eb1de8f10ba30bb830c8b5c965422c7fb856ae06eb2721ab5da" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="bcd325b27cdab47487f8629438543bc1ed5c9abfe519e9a444add16a86e42124" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="492a7c5e8154f57e833ee46e4ff4f66f30a89aee05e956f0bdcfaff21a6d9aa1" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="638a9661c764d5f9032c63ba2b8b71423864e0c9bdd7e52bf3ece958a62e2816" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="aaa01f830db24d10bdcd7449fa08de7d1c520ee7aa4003980ae131e55cd3297a" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="e8daabcc08ff4b6a53d69c03111b530969eae10589ae21b1182a11266110795d" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="93f98576d24672d91564aeb528063a9798d8bcc9178e29cb917fa03aa3d76f11" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="cb3533d18b7fc023044c3276edb9cffa1aea122232e89dcb72c7196a9647ddaa" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="2e55803b2b7f38f853337f625f84acbe71c40e5236c3e0ce853af9249f9f0b17" name="kernel-rt-64k-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="1b2a5ef1ab62d092c28ceeb145327c8570121ee1a9005bdb43befd3d0ebdbf1a" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="4677d2619e403cbed2b166aadf22d83917ad0016f895162539815c8ceb93e956" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="ab0755bc2f7b69fabbce9f068b87ae364b021d169cadfa4a9f3d7c13f8293b8a" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="d3fbe358430fec8fff1836a141f37a565879082b6a74da29285d92ee0a46ffb3" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="cfe26c5a07e82dd0977db130331aeae787bde681b426609bfe76f3799cb015ee" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="641f6af5fc2caf79ae9a9068069605cf9bd4cdcfde7bb67f26f3193603f81865" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="3cbcf58875e08d64a68fd3e63fe63d2e10843f4d55c407eedad9fedec263f458" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="7ef47aad1d7d444ea2c3180aca9180d7949abce7f38982c095a9cda3521d69e4" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="41909928a470ad2397407c3757d47ccbaf739b7738c1f1e0903089bc43e44f24" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="96eae699796646f517297e3cc2fa5a3eaf1f6942616206066c413f19b7d7fc24" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="df3e555e52b0dc754dd2e687a3cb5b47bc928d7a5da03d789dc5f56395346290" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="e9f3bdfaa9f12ccaa05dab47848b146e4bf63bbf55cee293c10c97a7a5e50e31" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="15271c2afdf2c12751776d976cf9e6a35dd91f543adedba27b4db9646b295843" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="27ecd7e9bc49194adfa99154ea664e45f50ebbe78a2335dc5b9a8cb6f49d3fdc" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="83979b2f879e362155eba6ffd03530ce00ac7604bce24912e7534571689f922a" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ebf02f06ac429d12e7db8de34599d5b085c9e06789c42ba05ff482e0baa28e73" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="aff6e66d7e7744b3048dfd198e97b7db631215562f6a2c280e2f523416780bb3" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0cc4ea33bc55981805b989b67d97aeef28673a4194c0880c843f67882f3a46f1" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3cfb5b42f9641389587f3e03e10f471f6bfaaf5a18af2aca5d54065282e5ddea" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2042ca6140e49efc1fe658f0cc761b0d658088bcefbf7073e370d9ce7d42aaa0" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ac92c512fee6c29a45b76c6c1f805465f81b20317b2b598d791df6af06663240" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="be941990c281a126c9f074e1bc795b2d9c0a148ad5b39102414cdbf9d96254d5" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3c2b5da14713a441d030f8dc55dec6cdae2da2bd89de8785cb48f5825d698d2f" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f1ec5bfa00f0bcbeeedc77c2e3162072872d50ded4944783f741fca7f9d7569d" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="2ad1c0eb8e1893c3837a5f87ccf55e8c168a31ef49f46628bfee62fcbd0522aa" name="kernel-rt-64k-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="86c109f69bb8d61b9fd1de8d22ec5463c3fe8c02384bbe185b7733b3b85e10ab" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="34d5fc7bec58f97575167de0e5faa2d97fffa647dd6f9ca435eec61d3921301c" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="93d28e4b9b2b63d43874413ddbefca85e3cba5586b848bbaea619d972aafe328" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="e7e712363ced9c875c7c642dbb12abaf4c44aacd7edc383ef9aebfc51f5c00c4" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="64af3f68dcef98ef0df467d9b6424fd16aaea707d87d881e24040e7320537877" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="0a56f158893c27dd1eecf5a3c36cb39870629e40519ee45676e32980eda1de7a" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="fec86fa2191c0862a4e983367165ca6b58db70cd72f246947777774aa6c2de9d" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="ce2f6181749a8dd51dc479346477530c7c113ce75a784bc7db41996d677861ae" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="a7d86fbd3dc079bf97383a242b0c0c822962c3541fdaa8d35b4a0a0c6c271685" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="2a46c5f71c7748ad4031e583055db70bd9334e7bc59f8c83a2f0da121fa5e154" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="a4c8db0a922b8aa423466dce7c8f3d419f9657aa5677152cd8b8a4894c568f27" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="d35018ffea1139f470c031ed90e6786c2452605df1015b7a052270d6aa5c10ed" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="aae5819c14ea0a671b37b660aad001bc5d6af3d174640a88552a28230011c433" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="fa6449f742877c75a31e607a6352f242fc811cf7cf00b82203213f2aa545538b" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b2607b577c1ab8788e3ae18f4a43b00a413b26e0aa62e83613266b385c109051" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="610a935bad8a4e6e9107f28f8931fe49d9a88135d62a2343f2a3c360392a7d81" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="492f673b7c05c4a8a546b8e5606dcd8a1f25bb0ffcebf69f695057e242888dd6" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9556c2852e3bae4a977a882efdf5d99307d2d9d53e77502d3f5cfed436625d3c" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="95d75a1c6bd1db6147cd710a843e87d01fe0171538c24ff149f613fdee039b9b" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1ab549ab2d6aca7427c1406fa26ba90cdb3a88e51cd6e57050cc3986de13b36f" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="063a8b8287daea21c078d5fb718961d2c7f066d6a9cad1571df38b846bac7b9f" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c181cf270aeb772da297ee722feaa17ec4c209d39a8bc7ad01bfacb025e8ef72" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6694ffe299a5adc24bbb23891fc6b9ab1f0063037c668eab097d0c0144a6b735" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a9b64141894c53610843957c89af313392c1233d0bc5aa581b7ccc23d5376a66" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="0ee16276cfdffb647487726dccb82e42164251743f9f42257216df900ddc8c04" name="kernel-rt-64k-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="957724816112b861a7b79239df15989f613e9dd462ef420b8b12277aff3cbd1e" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="5135f11b8ce3f2df1718203e494f3f07c0420fba93f67e55100dde215798663d" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="a9fc6d62264cc7615e31ae6fe286c31d2adf7a9199ebba0880f2f3ee7d4461c7" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="cf0763c869fb297499bd4c27e13630396d8c6f60085d8abacccc66f9689458d2" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="06f7658cc7a67eb12cae894e36321964ed15cadb3b6580358cb4ea44f6578ba1" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="5047e2cd9767f4c5f827499a281921bc48e1a38c14564d6e5df6ed51f911d0b1" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="88a00a31af5bf17b012c7c208d9ef66cf69d281c90df05b7548c6ef94da15c74" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="8eccb6d7c24fb44531ea415420b4827d495a48a76a46b0db989a66dd7c4dce15" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="e4aecc177f916cfb1ab04bc08c570356df65573c33f97977e75549254329975e" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="193551b8d8996451c32bcddd0f7e6a1b6a66cd01ef3f0ebeb614735dadf7b4e4" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="0b4ac834b9d4f6806d122ebb2b4f749c517dae27a113a522c305220fc45d2ea0" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="09039f9ee682081c1d4f460f1b86abca1a3adaffbdbd33e8ede81ac5b8b54d70" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="4a385f7d4d0de1c13bafdc54ed03f198f3eb65aae1809534486132bb764c7468" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a00830fc2e45ff51f90ad84d77e7bbe51719c83ad6830579f501cf309190eee2" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="38d01ad83c40c48f8bad25b31ad8604ec1680ccda9c495ab2b8e9bf4c0dcfb8a" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="625b1c0176386ff8f36a32c382a36afc4b94a575b5ef7db2a2b839b907717ce7" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="05b74a4738393d2763c95cbee235cf86af21dd5351b34f459b6649ef2d95771e" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="59f8f0146857aee1d29e139b9fa66202a9e9cc27369259e739813a9c9850b7f1" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="5efb9fc6cce254793619c0a0cb8d6d701940948d4b19364bce1f997e2c7bb6d7" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="72f153c718fa22013b57565e78daca3e47816dae67cc3f8a0088aa05943ab7f6" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2ec4bb8c2ee5c6612feb61486691e6284f6c46adfd5b636495d447160f3b1f45" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b34bd1284f7b172350a013eadaee091a8e3399b0be39d14b34d107ee1d1250f3" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="5ce0b51d5637f5792c37f24708f6a27051fe7fede63d218a6c7145cf761225c0" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="788b6c616f5968a91ea823d951671aae67f1427bd2706daee7efe85b9075739e" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="23a3381ff03fe26f6867ba8c8c7bf6f43f10e4399fd15ec176025939659afc4c" name="kernel-rt-64k-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="97593dbde2839cf6ab6b6e82444c9d1102ebd61e283126d31b87e9a2d7860ae4" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="97cda370cfa4627fe27d4f1f4dc5c09dc3f0c8aa12124186d82b7e9168069dd4" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="df7c049b0f08ef5fcba9e056096142a507f4d25dbeef5dbf9ea86617b95053b2" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="b7b980a9b504b1386882012b467ae108b8790d3d2a3e43fe1b23d7b99eb21f39" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="b24158012987405a6a14e0a8a3e0b42e1d01877d858efbf8fdfd295832df2e3b" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="bc425545e08f37127b275e198a987ce916486122d9a0eacc18485143ed76e652" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="d93d405530043061ff6a97f1dbee1f7590ccbae01bd91136c0cf54f5589d3e4a" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="f9f0952ecd10ad5215b3c38f356b00e347eaee8ebd83cc65a851775d4feab053" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="aa4ee0a92a44e536978e6c9ec64aa8880e4a732c3fc91fdab708cc09154b1750" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="9e0d104a20c7a43bf0ea5c72d4bd45719b8f1eb7fa2f4e2f75cd5b41b32bf21f" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="e2d9abf2e382416dd347738e0cfaa3997fa0d01d8b4929c92d8fee0c14c0a877" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="31825b8334d8b0e9964178b83a41b139a9a856d41024b559ed026ee11a9f679d" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="db4977246a6e1c92e0d4b4a0b9f38f87402cbca60f69cc36abac0ee92764f521" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="895a31a35de02f1562ad6e9641a539410557a32eba7613222177e60e017f80ed" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a69d62641338e3c38dc97ae4eaf601cc128bf39c08b8c95112900a6cdb7c848d" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="067f1c23715962cb406ff3b757d5c357578915adbdf6a3db00d3894ff6f92670" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="307cc1ae8d93dcb853182cbf43988f61967d47421062a88ce32ead548b4c1087" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="44f5f0f77a78cd9554fc428012b9e658b3f92d14fd6704a037f8fade2180f599" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a36cda354dd05ccaf47e017fd460e64935b2bdabcaf0a999458d914583cd898f" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="58a4a1896976b4a624c8316028d8f6acb58db72b4bb9f0100a71281836abf013" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6b8c85e2d28189ea7a6788606eb1c11c7fb0e97c61f4283b4e0bacccaa106534" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="086423af27e10766a63ee861b2b5abf0a2bce974489809380216e2b23cb93999" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="913bae5565d7b5daec2fab702f039319589325c46aa80c48a90000e53fb28c27" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c78f544eaf3c5fee38669f0d7ddc3f208626cdcfca657f906e7a1b18993b6a57" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="80a89cccf6b4e44f9500f8959d3aef6bbb5865754ebb3ffd2a68a6977e11ea98" name="kernel-rt-64k-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="48cc95b808f6651697363815ee1fc02dd18623f06e79b79739dc138057065066" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="49ff8d32abda54e84076d8fe43e6c35276e38770466f93f8357754850a3b43ee" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="5a46b2dc631dbd2bae1251f9e233b808e132d3559bcf10bd9b579bd71d3c9165" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="b6c0a4a608054d8523d3e12139028a0ed9cbb7f42e1a7380ee0f446a6f393ac0" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="42c117de2f80f380a0045a85fdb6689ef57caa449817586b9703f994ce7c4e44" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="82fc6dac5918ce30903eeaa330cca2b958b05dd486909c6bf71aeb46381e0e34" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="bf1d7462591c9ac9964059a3e65698bdba56647851e4f6b3e20096a7dbbc11e3" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="7832504b7da9c29a9ebe8c57b5756caea9d90fcdc864d9dc2c2c3b2d6b8291a6" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="63bf9190664480606361f41f2a2ba0780807d7010200ba3ee0718b2b09ed9060" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="6b34148d5958c2742c31e8c27115e823516ba373ffeeba39e7f000097ded2618" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="e415fe4c850ba56b0bbc807599c5623e5f54e68640290ee96fd7f633e5406c3d" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="5be5d7bc60d1f7e7cf165fa770e4ca533a0b835a139d8eae036c25cfccb08676" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="f8ca33707416ece3097b39b03373c546685ecc3cad07d34cdf0821eb5b794d14" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a9a0109c28050b2636db39d145098e4ebdb6e1a6967178d443f5626da1f3dd56" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a340a4bae91aeb0ff1d7d396eab4c7ee789f9b5ea9c2e71510e2cc4eccb036f0" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c4ffdc72d77ec0031937f76aa4998a66b8c184f01ee78da6f3cf9beca0d27ffb" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9c35b575d1ba4caffbd2749052dcd49d94a0ad17002cb237fdf28ac0080ce74f" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6d7bb8cd6e99b824a80fcc3690d7e34c124ccae14e257c3961cc24e90e2b92be" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="92b6b25321b181e7ddae360a0db80a1c098d85b2e28dfec1d730abc444469502" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="047643d92ed3229d01e4a9e6270d71305795c341cdc68aadd1e024ff122be39e" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3151906ccbfa39ab7e91baac41b558364879902a4d275b1f9dc54900c23c9119" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4b53c3c8bdb3e37d092256f2cb6c118261d8e50ea0a3665411901e1feda78141" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a9ade85bfb15c98a88aa47253c7e067b8d620c5b95fb8462655e2cc34741b979" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8abf2d950782d4556390d12b9f3b4f2281038bf99de98f5cd859f11b142e9d1e" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="3c567ba32fc4df0cca27103eb7b9014c90fe42f4da8d496ecb128d7b60999d17" name="kernel-rt-64k-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="d4634a2d0452391fc4b297730f45ccede5b8bb5825a45c695fa2248fd42b4c86" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="948071ca0dbe9b566afb3ec696014d77038b437a45c99dfe6cfa8aa47acd3d61" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="b7bedd32503ef427db7e9e155a9d3835a90b814aa7d52bc8a880e4ebf8ed66b4" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="103c7d45f723ea78ccd3d87cdcc5bad7784e0b91487579cce44e0d78ceeff333" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="a648c061892185b31e195d87279c4f7cc72741610cb887297c053bcb7eff9678" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="a41d12d29233a202507c20e5bfeac29905fe86273920df6efd591ab40a32af31" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="f57f4171b5f64f3d4ba1c8d052c75da8886b5fb1292cc661a672b2d5541c9aab" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="af5509db30c369721f8d5f0b0cb754402da6693ad9ec66ba40ebd83d2f0bb1fd" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="7c73749a431330d5e5fc4705316da3852f425c19d572fa5223aa68283486736d" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="f59618a7ab10eafad7ff872af2912644b9d7c683bb0fdde5ca5af4b91e8ffa7c" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="273c93571066075f413445d0d6142ca74cd704ed8b465a4dbead99ebfea11835" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="32a429eb58dc557ffc72022423231dbc79e4c8ecd034bf55813d92689c2c0496" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="b83df1ebcfc4e7f64751efd89618f0caf90df6d92d1595204b2035f6bf11eb84" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="95ede1de2d3b8ba3c6fda5de18c2d6de1a9e1e8d7aff99a872d8d7d428b89777" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f0996f1b16e4a030108c130725f9250ace7da2cc3ca5c22e57a0418fdc7970f1" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a11dc23d9d33d0c4799d31288446061db742fd71f88c6d6433038d48d1be4fc6" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="eddedf8aaec50c21c0dcd95de4f766ffc102e8ce891b40b98ba3ea66da50b3e7" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="aaea315ebf9e27122b7826aeff709739a3440fd3039cb6742b28697c47689697" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="38438023ad3fe3f0bdcdd99d7fce74af7ec4ae166bd79712cf5f6a8c5c3c8bbd" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="445712acebaed2904df6d4ef0cbe0d649657fa610c937481bb53feb798d5debc" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1e7300be3d5f8ccb35c1828b4e3b5540ceae28a06f21a766e94c57ad25aecf36" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d93ed3dc62ab7f9e2521646d09cc6c153f6bb5c05516d851596f519b9aab1e91" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8316e3dfda4a53201435f13da8529edb8faa7bdb7215f0a9e17b638a486ff11d" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3df142f8568c21a37a0cc749ea730c21744127dbbeaeec397dea6b390df9fcfd" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="1c4bb0c28f11f2a0dc770affc9a1583c243069ac84770efe9c9b429a5be56ebc" name="kernel-rt-64k-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="54281208df38e72d57f7c8b474d4499b6d5bb7df0b89e6859150351c4b67d53c" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="75289d045b49dd73641419a82b81787393d902efb1d3f72daf6a204681ba87fb" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="63f0fd70260497ac9fd0a3bf75e072edfd1ba4c80be01f302462dfd9c4ecbd13" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="f186ce4f1a985aea0d480ee505f5b485ad719a0c73cb00b5d06b6b74d64375a2" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="675fc0a55942e6994f5077f77c0f2e7f9fb28869bc7b72538ac5debd947a722a" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="3f59d7be2e01daed5d82781193d1bfee7e59d4c463bd596d3e0b5d52d926120a" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="5898312b854739078f93f8f9186f2b5dc5374949a0e0f6ddc5da3404d84a92bc" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="6e84cceeeafd79f1b9b9fd4ca3ada4d12e483a7d4bd54873b5a0e03874d89add" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="63fc23e9c5c7bea85304c16e6b4c9fb5bda50207701ee474457c57aa73e9e0e8" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="5cbc7f9a0a34a669a5678558cb5d6dd6aa53cb17102ab31daf0400005b2e9199" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="9f428b9fd30883dd37f8414dad8d00d140b4cb9ab57d12fabdcb933134b7eef1" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="66513badfbfcdac20c834d8845228ca8985ca0802ac8edfb9ba265c5b00a3844" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="97df6edbd10837af6862fbf7d175cb62101b3cf151495dcd45d119de5aef339b" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="19a7674b277aaec9a99417b72e981306d024c2a28e0b381526459f8fa18933cd" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9cc05e4fc4eedf4c0c9a9358287041691ef57551e5ef9d8bc64fc95e3a8789e7" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="648fd41b826c28d49682eb1c2096e2a781c98ea2c2c285764b825a9d1ec69ea2" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9560790a26b88965949a755613081847bc0b09df663d271c45531daed6615567" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="eab9133de512f1dbc8bed295f306190dd2b0aac2d0ffc65c1e9c042070d0d29b" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2023d3f7fe2baf80ad173a1641798fe603fbe42d4d5d6637c3cad80cafadb7ca" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="edba6220e4799cd5a2c010c288e6f5166de0006eca6c8049184eadc1e728b902" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="5d1b29052928a3e2f95d77a8d72a09da21289a162fcc56ec2964283554a1f451" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f0f9fa89a3b36a2831569598d57c5033ea8c0d36af9c35f6168d7b48c37de32a" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2a1551c21ed06c42d1e82853e7d02fc4a61692232b1a6438a99aa74f9366775e" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f60e7d0131e551687df004a9d99273ab7c591f554ca14cef8888e4d0497e9c90" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="0b6ff417e1e073cde7376eb7b968521418b9a1ad2febcb83971846420708849d" name="kernel-rt-64k-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="2248662c6a5040a48b14f9de091b848535a89252f3ef85b23146817de84d9571" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="cf3b4e7751fbeec240d13a7ff9ea3e331412b4ab9afd49db7ed6152fc1ab4587" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="a29a5dadf6bb45a938acc6614ce5c6b69390613b78244955a1bc43248fd492c6" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="def8d7f0df7f683485a51c964cace9a0613042333b413295554dafb705227e7e" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="efcdbaef2f889de2322872e63fd59aebfa0f2408daf3e199682edb60c96a4d54" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="8fe0dead7e5063ab78b94051c845badad1977fcd2fad3e057d766d105966d14f" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="7aafbb5ff1d941f3081aa98b6c2fc52619d959cae95564550fe775010089650a" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="a8b5abcc126155d5c7f240812f46475572c0864dc2a7c9cb6809e1d624855a5a" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="dffadd555fceaa39dc865317bc2a24791cdfe7c80ca7f668383573a184ebc24a" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="a517281b6ce5cbf41249d32d75efebec5eddb5033d43cc31725d460b56108d19" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="712c5b94fc9a89a7324f6653e75e3e050839ec151d2038a0510f2f167306e3d8" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="aa0568ba491b5e628e37e900edbf6a21c74e078eb2f3154a39b47ce795694ad7" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="f274e55023a1161b6f1e08993d72ef6c692d0876292f13ea5d16e435dcb54a6d" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b22cf544f22f5605d90b75813687d84874cf832585c1eddfb49c0a09584caa41" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="cd9dc7d8ceec9a4fc274ef0430fcc58db6ddf5e92bc18e457646b719a7eea0f9" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9acb7b13402294d5a687003b020c7a306ad238963558e47a935f24b4849801fb" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="74e66c1e38c9ea87f9f200175c41fc31c0b122f99b509db21067779d5b745eda" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="513c440b1db28ddcfd759c0f0ee9f9bdf39e1e87d38dfc16a35f0925285d5804" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b535f2a648bb9572f2f78f480d7aa5d95d1bab7e066fad80ab6c45d3bf3c6ed7" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="27f44279e79a81dc95c12946f419603f7020046191ad41d27c3766d2b1b491eb" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ceaa9499b136b35a66358093c5f4ba67cdc5113b1d19e5810a1b80273d53e9c6" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a93758b70e2f219812aa0046feabfed64c58a633c086a6b9fd68d5492925adc3" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="071e1d692e79991a28b9a1a71a2d04f00d8dfb5b14da4cc6738ba6ac102eab82" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1c65940148ec0d6408411ec9a8ccd017f78e5a58a027a16365608357078a0bdb" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="d12bb98c974e429767bbefeacaa2f05ba3dfd0c7ec6cf61ba73c8c7a4f8b615d" name="kernel-rt-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="b3bea7e7a4d47105d42e97867cbb6741c1498119e199fb76bc2244282d5ad651" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="b9c5e24882bba09a8f0e74be52eb36ded9cd60a33c9a0841045b692c3427b877" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="e17aa8168d58bbc298e921e52ea3ded6371f1d279b2048542f03b44c027d6b0a" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="1ed9426bbdf8e2a11f7f3004669c36ec21f13491efbc9883e8bd7eb2671d7436" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="0187f0b54ff75b42015ba4c0ae1154e5fe3647d4a062ba6a8e62550cd8cca172" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="f2a7538f2d9a824d74baad91554b0905efc55eb5f5fd0b4292c9d471669e1753" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="e3cbb1f1101a75b17246a952923f8bade98e74cbc43e4711d86f3e1bd1f347c4" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="64501f0e796dac69157945ee9b60c67387c65667682ee387c67e7bf6ea425dfd" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="f1566e53cdc4484878f805ede4dd142e2dab71da11e457ca30776aaa2c9aa434" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="e7697a2645d1769a20c8416ff79d6f75bc63176435f42fcce83e762af47e48c4" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="24c0e97274736e04abffa38f5a3472acf6aa18a5a320c989b4f037700aa368cd" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="9ca3bda5a4d83efb9d7208c0cc7335d96688d78b6b6e725a5873095232b19336" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="f8a9c27efee88dc2ce50e432304f750dc41dcd837ba2b401806cb4bf9845accd" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="586d3de43b2057dcac0a2831ca1672a7651965a6b1032bb1bb6e65b186b29569" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f06ab745dd993bfe2ecff37dd5abd82d27cbb884dc55055e69cd733d6a54f73f" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f4ae1bd01f290783625085cde45f48fa0640c8d6f106caf656321a6bf56f9638" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1b0563b3dfc4d6e79bf332b96d983239168bcaf479fc50b0ac663e98bb24212d" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="250db0292eb4da88bb631d28cd5df72207348713816b5aae78622f884ab0a52c" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="345f23b2ca606bc3cd9742ffb07b2f240b2afa3a2bb41217e1acc37d60b5aba3" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="05ba561189d117668a87ea969e2712aa42dccdc3c2a6da4d507c3db8fa4eded6" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4dd1b04c0270a3b553a7a0e6738fc2a107ad9ebfad31d758ba1ffe6d7b6b50da" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a79ff17005f4f6db2d096ca2c3a4b8e4f782bf7bd56d834eb96b0a0181c19f40" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ce32f368a705625a69cbc1e215964ca53b53f6300dbb6fc0bc98cc3774844813" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d2b2eec4cd229a6a247e60a28a12329a71bbbb861818657e23d32d2c75511bfa" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="27809b00dd7ca9d1a54c00dbfe7bbacbb7113cf727dd2dd7bd215614e956e372" name="kernel-rt-debug" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="ccbfc69cb3f71fbd5a181f0fd8ceabb976e3e80d2cb0c19d21ca34a769aaf0e8" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="507a528d7991dbeeb32aa3abd80350b251023914be2da578a53a349c4e282023" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="50b7f66cfdefb8c639970cbcc1b0bf4e313d59b70e70e0b81637ba412e954e84" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="cf373fb3ac100ea9bc09888acefafda86c71c9c60cffeee5521a62cd9045495e" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="192c42116a702eef1dd0b0c82449423894a3a5d869e5966ba389641f72a3c0a5" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="db8e8a36e628ac4c199bacb5d15cf0f85e3b9e74308624ccdf8045378bcbef1d" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="21b5fea071552fc3ba2aefb1d02b0f6cbcd7435355deba00180b3ee46bc47615" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="b7df697346c25e436986cdca05a350b2528a9e0a44c83154c3e12cae36059ac9" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="89accfe24909c3fc379f7032a367c46e4d9dbdc731eaaba203cb00cebed8d191" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="ada1461b5ca54e0c473f0479aed739b59bd4d513493586656bdee28fa7759da6" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="9ad347416aab759b4173041d23829c46edb16fe74a7c15ba5eaa65397eb871d2" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="4c246385dcf44be7713669900dd583ba893c81174dc399ab9854b43130f605a3" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="6baa1f8d31047765e381a2d0db0696014ceb384ed9cbcffeb22afa9df6db4fa6" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="99bf802a27dccedbe7c0f335673aa6d1cf3f25e9f3b1e3d41abcc8d6342fc383" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8ef0d27da144a85c2f9763f50a019f9238eb06a793cc85141507fa93b3d81735" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="adb38262f36c9dfc4e5476dc6ccb2b3db2197902f8a11a6b4e036523c53492b0" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2ccd6ee1d687680602897c2c62867dc576757e1fb92e2e314784fa9d152392bc" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6de4e0b23009361fa3e6a6d76ec10229d179fec0e39423a218667d0e282caa33" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="602c8e34feb17489eefd4791f1b5b78aa277feb9021077cf6a5d74ac5725ece5" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a38243a402315dbb430fa54657b1eca1aa0b8fa1b874707af493ed831fb91efe" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="e3cca15de84ffaeb54e153bc3f26d5c7ddd2b685fd67c644bdd5c1bac68ddd0b" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b840cc690b5479da652f45354c776509f1beff401e8765b08ef18e771e6f9fa1" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d13ba23befac6c60eda4fe4dfe605cdbaeb5ef242c8c4834dba88844cb880c6e" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="935d9b5db74983dfc998f9dec9ca98fd49e091fe9243ba2c76e4a20663b587ee" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="b344083ec9e74ff02b5701bf24c3e1db9a14c54ef3717541124da5f820731280" name="kernel-rt-debug-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="812bd0ff3710d05c3fff854c2451811c015d20c2c9f1ba4708aa8501ec20c02d" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="c2a3fd600247e98f8aa1e37c269d6ecf41780c3f43959092c7dcc13ff1be50ea" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="937f5739945e3c07fa35b7abeccc3f767f803c3fb5df4e04891231e172760d0a" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="7dd265441e1bafb44492700a47991eb7c948b17166ed2a547480db30dbc6af68" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="2557ecfe365a1ed97c366149c68812166de6dee1018b4bf35d96b414e91d61f9" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="ef9e5c441af59866872f9a8134c98475b03311aaa12c7beb0fd48c8df2846f56" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="a5c14acdcb094bb0476bddb5b22129d158d560ae82cd1d6c12347e9d1aae5617" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="1adb5dd7cc3f6b48dd5a7a65322f2a48ff6c7a8f28aac9564a579532f9875171" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="a125a634f0e2a9867a1df987af303205a16512aafe2988a35bcb9f00c3cb5b87" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="c957d795a3da4cf0ccb4b0b2b7cd43ab5f31cc6c07eb040ce621193f7985614e" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="ed177a48c60c7200b39e960c5554a205eddc65405f6c390af944ab87c2a4bd65" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="adfc7e6804516ace0e334f5789a705890c4b0ef0900bef4997eb6c7dd14fd811" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="16562e5c40fda2a454419bf382f510ae5dcfeee5dde21c0e665c419b36470da5" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1ded98004335c8d31e50f21f19d0b5adc507cfe9a4226b1e791c58183b8df2bf" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ca0865acc0c487682917c0b03c75a736584be5138db1cb56ed905473e739a358" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2bb71e7ef3f22647c4d6c51a7dc2ee067daa1dbbe7541444013b7f5b3014b0d9" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a2dc9d3bdbfa5f63095d6fc75b2d0ca370717ca12afad1585dff16d932f8ed2a" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1c4fdc2f44feec14922a06400dcd092cbae14503617d6a161942e77d1c3d55fd" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="50ebeb4f1791cbc7954c41f3d7cedc91c354057078376792efda69bdb7afa64f" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d726f6ed72ab803bc994d028767314c748754edc42b5c2a7e1a722bd07b2e9a5" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="94733427e2ad8a2958dccc290a9e3159202b460cef98a433263dddc19f696101" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="49dbebe1ab988d7e73f830148942019f4a9ac188ffa5ed23a4deee3fa7d5da5e" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ed1542d98a8e2a6ec4fe6f93cd062ab105f694518900dd79b6292618a6132dbb" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="526904fedf670909113b60c5d6b8f07434b4e341c7379fc4c85027805a28a568" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="9c7434b9e3c245f4f009f44ae6066abc4880de0e9f7d400720363ef4e4766d31" name="kernel-rt-debug-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="958512c5e44ca9fa6c884ba0b531dd78c2acc45181399baff0c898e63fe68dc8" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="5f1b2940bf791c91791944f30e6be13d2a54240676246dcc7b7a200b5950ff95" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="ca1d416d09092b1696b1d601ff0e56861d56559a865b6db68418d4c7a6c69681" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="da97b7f28a43950658ba041263501c3145cf0434cc178d223fc7352fd3741c81" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="4697734c6f60bc3107bc51d84d2c7a9244139b2dba99a97d3e397b7033378020" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="62e2205606dae6981915a8fede359273114a0707135abc45b719c6c9b3b124e2" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="a4a4eadafafb32eeeb5fb289608d1d84179c95d1f279b8b153a711f30e6d3a57" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="6a57f659e04311a4a9396167b9e6fd7a20070303912784aabef69d58076fbfa4" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="5896ee2b35fcbcd2a710744ce063f1d0fb649359ad1d9cb77b9973ed8e7e997f" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="60f9a469ac9de450a52fa0ac2876c30270387eecbce83e685da569ec7cb75c9a" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="bdbee102478c2f1cf9c576a09119aa032bfeb2106df36650a87d465f41adc9df" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="c9d9a51002c179def6ee32fe84580d15935bf7a3be830ab1d69357628e3f8fbf" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="ee43587f0d254ab9851b47f7c38373571a242273b92382cdb8a3be6cdc6e69f3" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="727f725764377bf22ec106ef91bd809b532bcfef09f6266b0232591b0ca902c4" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a0615066536146ebd733519c54092de7bade0eb7fa66fbc4193fc520238e8e9c" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7c9825a37a2a958c1a2b464afd5992dc76b5a7562cd603f28166e9834d422696" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="879683b48f49a921d62154cbb7a6d46064cfdef7e6d226af4ad5462499b681db" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="18cd2ee8e511ae048a9b321b58b3baf1b09c12727309c2999b1079b6d81a4532" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3a863acd437c63cd2dbc3079c984d9febb4f48bc69b4a4bc02d8e1383fe8c9f1" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a343d43c11a28335344dc3dfcbb1c31b5f513695167f4cb261a851eed222ddb6" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1d811ac4c274ad660f2361c2cc26feeb856ba0d63665a7e2772426e35c984564" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8d7b0c28ed00645e0b45a45e758f0520f238c6932829c8a68e26d7e315614c68" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a96ddc52a56783fab003ca893ea403ded37aa7692c856c51ad25d8c9fba5b65c" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="13733bef1dd25557820de4e8b5fd164a9072f5aa4dc739a2423077d7cd7709b3" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="b8a65aeec46dee2ae76a72597f088bcb578d61a76e55475b773cc7063dfca621" name="kernel-rt-debug-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="910ad9d3200e6cc16c94dabf0959d669dde7fa3c4b9d7370ac358d3a392abbd7" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="5a5f29a723646b8b63f3348684f373ed06caeebf20accfd581f89f84f29b5e5c" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="647750c2de8d22c11cc0b0dc01b4e4e29ca8cd8636f67b4b16e7731d58e92af7" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="49c6468182aac5025e03b99622d08f4394114d2a871c7e2970cda3db7e03e22a" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="98fe486af336554ab564e3c88a9a101af2d70c51b507ddffebffb9ffaad0dbee" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="2329ff97ac2ad72983e4e293c8095b75028a4ea584770214f913f2eba851e221" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="2ca514fa7d1c2318e3cfeccc58fe0a2e1dfa9bc8a7f3c993519e261bf563a5bc" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="460cc30b5812f2f72c537200824ad63b5a849c4823656168128ae8928ab0ac57" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="8c93642717ed4ca8bd749eb8608d490cd61ae3c673eab67f41ffd5c6b1c170ea" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="87e31625f6c6b85decb187bd5b3a3b40b6e3df7b9fc9c11c8e06fc6a59730e92" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="293091ce030fe7e84fca537bc41887abe48026d732535ee903af52e811108e08" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="01f89cd5a42646183852c7b6981a487c784756eee6e6f2007a5a5dcd3629b32d" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="a9de28115d5971c8008c008c91036f025cbac03d005c8c65a631c715c164a79a" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="591c5218993689c6855e842b59c8a18308e0ae47b8814f33d87704641c46ae2f" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="54f17e477f2cc3fe6609c801d287b937f2a2033b3e19f0b68eccdcccaba99988" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4ed48b2251da62f8c5ad1e5623c571fdaa447aab3ccf0811f3452b2c23dca716" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="913abe28a81d130fead618afe55f448766c29c6af48faf73019ec26252fddd0b" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="64328e63c62c57e8b95efb22d668793b84c305cd6fbbc02e1892fe283146b49d" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="62e5a11f01c6427a315fd1f538e86d886f24b480d7170411f0ff7200b5b90694" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b7417c52832594ac1a699aad8d2c72f43fa636cad7aef7917ddea91ab40040c3" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a7e0d704dbc9531faca968bbf5a5152f7272986812860d6a510942300d679fb9" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="22a6021d435000a302aafb6a1bb913f02b5adb71a961efefd6d6414df870ab19" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="eab670f884c3883698835fd1bf244069f9ab25ed635f0240b981bb716c6f4cdb" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d64b0758fee33b916c81622d7b32ddb636f0ca7b40111b58542a859b6051735e" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="cf69c050c806172f0bce3f4e8a7f31701a904b75388c983d9fdd6021b2505563" name="kernel-rt-debug-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="a2737ed6aa46e4cddd8e82097b20500486362c42078e7da05a287e19f370e3c6" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="e4406bffc884a15379f95a400c327712d950ea208c2f2f4292eadefa17882a1d" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="95ed06ca317055ed00eff36860f7d7dd94bd54718925889250d42c084e7293b4" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="4debbbcf4564fab642f4d63f199825cc57a02b5764c03fbbd40577e94510ee05" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="4744e2397d9d05dff97b1e2f55e010298036e1239a39c67b4bb8c2b16cb27f17" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="88c895df8c8777ada7e0f30978818c9cc4a37764b1b7c62ef199ea0578921997" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="4481b3c04dca8eb4943528cb61777c82894d1fad80127de1bdc03ac951b99d19" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="ac04905ea82ebf273db527d7a0751051a1da172a6efba61dabd1e284531c5ef9" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="174aa3646ac574f56c4fd407f7862e96bd9d5955992870033344d50eb483bf2d" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="9811dbe9432bab476666bb87160f7f9c0fcfdcd09e6a7ec3355c1a5b663bc3c7" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="e7c88b37376eaf3278f0b4d52a8533fc8f1e8ed8164910148a5348f79454c5e3" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="1e9b32ab200b829b6b107230ae81c30697a76d45dbd27bfce718318af5dcbeb4" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="0357f94548eb197552aba6cde9fc51c5843a709adb03b19dc06da8851282bb06" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8bdbe8bdec6a1b9b7206e592057bed08d1bad617889644b4942a8f6c5c0ccd39" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ad999b5e05238673454861db575226a27bc122b1e2660b271d90ced59133b81b" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f8174f8c9758eb454d42166f90393a59678d4c11c5ee926ae6e615fb1cf636f6" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="615ad398a1554d4b70987de84af9bb06e93ddf876e669ef4fe2824b9335612e4" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7bbf341be5ee1217fcb4f0342f82fa016bb77aa9541edff70ed90fe393c030bc" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9ba3cb06c9b7e6a982133ac4bf4bb89e56831b004411acafc7b85ea656a599df" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="42ff010364f2714300e8d1d4ffbffa8d9b8e69bafa20708359a5f0eac3b880ac" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="603c8580965b7c4bdd32c2d32a7994d0894d9c2ff93bdc24094b4def0f946acf" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c1edeaf4042be3fc7ffc354155246cfb8810c41b615e911eb41f14b195e5c16d" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="bb93a0d8b1405b723f33691907a863253d749f717c0c4540f7586956357850a8" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="cadd186074b66d439f3c61ca6fd484c2170f044049ecb4dc7559c89ec0c9ac75" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="2b8be31e161d285508d303259205f4a943c134a06b2598e499825863da1936b4" name="kernel-rt-debug-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="18593bbdab1165abc0fa76a135f857ee297b0b3c143b997d4a5512581250ffa2" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="05466044c9d58af37d6d35c457f6f4ecf1632e7927a535a6df1e7a14f1e75475" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="465adea6af6868e2b6e1cf5e99f63fc2b12db155e5298fb7c672017b2d4240db" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="41e1c37637176af36d9ac27beedbc1c4f846bbe29ac49dcb3dc3465f38552835" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="0de5cd125b659fd1846afa2e1f697aea4b93f035fc1dd2803037dd34ebf4a595" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="8c87da7290aca99a826a7feedc83b9511b7a882659344c57975cb5284858f012" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="e0a06412c3fd21e76bdb2c321b6a412162042f4d5e87189f93d8140343aae196" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="04449bf0429303aef6176af8f22eb2d81b17f9ca22507c9a1872277db57460b1" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="4955de7c73b55caaa09d75c08a89c1602f8b87798ccb88f0835d599ccc97d0c3" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="bd82a5e2d41560cca2ff193314121aeb71359c63db7a2fca2d8ec1ca4afcd6dd" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="38f656e192a672766d54ef277ad7d9494def7dd2e08cce20de08048ac9b57344" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="658af29ccc658ff9ea276db0670c883c811b0a9e53c6544c642c3343e4bb2768" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="2d81b8433be7f54f8660d74b0f10a6fda317c798263ea1b062ae4aa15cee130d" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7e5135cd3de8b6a5a9ff0aeb1eb2b9d1b112f8d9984e977b1ed0cb9e52844d1f" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="68ccff232ed4b2d508a9b4189b09383522817f2391806fb90e690350232e702a" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="018f1a033c2af6a185be7c458f46057b29db61d6656120dce89fcad9ff4c4583" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="18030ca00c27631e84c896e00da60ec580b1033c255bdf0119179a860aa86c70" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d5c30241f307b82de97ec6b2acfb7c2bd23a352296bc626ec66fa46a7462f145" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="128574a8c0f4f24251285a06a3dfe556e7082e3d3b74d1a8a019e56d7ff6dcbb" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a57981aa616311b821c9d29ff51209a1fb5d8d2a2e1c261a0dba5797fde854f1" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b49ddc567d8e3fe9794056d44664df441696c4881b1ffa9a2b7a9e64d7380389" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="48ebfcf1b7fb25daa5065739abde77f541ae21f07ecb922d99f72e563b7c8ae7" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="300936903c1635aa9235711bf30c98569d32138efa1ca6c52d9adf1a8537d72d" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2bd3f68357024dcdce76efd71048e44c2f5242a11d5f1b60449437c4aedce35d" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="93aaa1bb0c535c2b33c91efe3cf782ee44aad4d8e0f392f9ad7d3e6442ba8ccb" name="kernel-rt-debug-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="4cd939be957098051d56e301e4c6437de1dc549833984b5cc0778a40f5037ff1" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="e62136b90a0ce20aa3b7dcf04aff560c3dd7efef3abada4065df6c6ec8b40317" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="40f8b1ea814d222cdc9e4dfc2dd6bd3ba37d445c34f5e656dc3aa75c6a33e629" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="dfe1515149952d1f9f9df416443244e3f805bcf368f4a97d114f6cb30f139a50" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="89e8b13935a219b25250c72aed939fa941dfbfb00e61f670defae35af61e8346" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="1b99d1fd5101fb569105dc722c7d738048325c0afd69065745f7086d791883c8" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="fdc94cd734d62121dbae9ac0d9733c63041f810053e8a33cce1278aff0c4e9d9" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="f2e52f5aa9e356b32c2d7a09cb24a1755e89606c5831ee83f9e4188f0be02eac" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="a328e8001c84905b4f8dbb7345a5687571e5346eca64188871ed05419ea2386b" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="c154abf46ec4ff172e5d1e7495a929ed5148514ad08039df9f13714cce6a8bb3" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="f37bf148a52d3fea525976e6e715f0e037c2253d2ca7dee0887bfee4a090c929" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="e4883b4c671939973062f715bc940e0ecb1b9feec4902761fc34b63b5382e3ce" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="4e6597c4d72d45c53cd87bf8b3147fa4403f49df08ccec61ed6c5d502dd496bb" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="239934739fd8aa753df43c88bdabecdbaa1766560739dc21951ffa2c11bb0510" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="08c14e738db4f9dd02e4b48d56dc59975e1d3869a0071166f5c17ca548d71c27" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ebd2aba798991ce9e0291f6276f9aa47a78f69316cc692d81e1373c6ef45d0b3" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9f937ef5b845da3e7eaf74a397dc08c2fb63a7dcec4ef6a7cef1c886c1718106" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6c8df9bff5f0b5331ad063558cdf38706761a8acf4644c77d9ddae8583657c63" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8278cfc22da178054dbb85c81362a9da490e3690125e3cb4fa449942e5728bca" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="be895a6b97fdf531452c49bb2b6ccac73b7dc7367db47b145b37880c90c152cd" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="74abcbbce6d06e6235d4074b0d9c0704880d14668b51d728ffae838a6586c92f" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8cd3cb1464e5770d49ea25102b4e300ecce423c6f3f022c2630bedf177cc8d69" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a526309c1c948b6f783ac8636b3508cf8b27331450f7be5cee23cd0d677d8fd0" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1838bcf774ff3eae0135aae0e54fd723796c8133f558f5ce020da7c88fa35f32" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="31037b3edd9605358305d11bfa3f22d3726dadee429ddf33a0876141827c4b75" name="kernel-rt-debug-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="b97ada6ad75a620953114cd66420085f580f7c67ab990c8dec57aa27c86d9072" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="ff255a7363a0c338a3032bbbc02393ed01e73b1204f0af9950ce4a73330f675b" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="97bb4cabccc91aa22d8e6c0b120c1ae9edbe903afd64edeb95dc5e83321f07ee" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="882e49a6c1501a3d955d141ac92581ad6054937d30aa9261bf4f5281bd4f6bf6" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="c9c8a86f459f372b68b7f6c0f0323b7ddc87acc01ca3856ebb2d9ff23dc80f49" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="0f167f9f82716323ff39a7117e901541bcf67aa418662c7d501468fe31f316b8" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="6ba5b6090ea62ee00d7b57ad1cf3d9c1d9538d747f24b6c24a5c0e460c5a9762" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="0ed1390c9a2ba890ba48a444fe3292a2177377e7d3a3d1f0de9d54d3e22b80a2" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="730ac3395decf5e1d1ee41095b317ac05d96f986fa547917c66f1398880904d5" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="e343fc158a225668f925752fb73d13fc8d52e43eff9fbf747d28de4c008037d6" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="2d17cf64ea6ecb727e0d341bc75f6a09dbbbd6889332d7a97701d1e1c28321ac" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="67bc26c5c5a434cee282ec4b09def2517d4353e26fe0428c17320c3054e92208" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="1f17626ad7adab83a3b94e982bccf077f80d06385aaf20cac79bbf1e868c1792" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8d0c85f2b5e8a47c8c5eddcbe68d9886ce66061784f974c9ecfa4180a4250daa" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a7ad78b7a973eccadd9d484e1ce74795625c6a80adba6bb18b00dae1f2bd3ebc" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b6ac4355e1c60ae08125ecaf9b152a3b7dfbfcc54d49a8355150f315fa7f1d26" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4899e4999fa9dc738600e6f196b977d0c6d6d4cbcfff4dc540a0690de4f8846c" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d386fb5c7aa8c472fc2ffa318aca33e035a645305c733906dca619e5924b3595" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="258128433fbd0f5274c6de387772d7146d9fc9e3be35affc104f7d4f5950c921" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="435eef9821546b0c87049371fafdf6cd0ba26c5b6f5892b500aceb46365f4a69" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d716bc92506dfa20a069576059bb6113b3cbd69a429aa7c335556bfcc83c038a" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="175e54c23dd71db4613d67fd5307fa8fcc6222b7bc74060bf0207425270d66c5" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7221743c8682bae860f9713d6e78842c1a3068c3dcd4ce8875bbac9829e91094" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c0577d7658948155a89f837c95e0a957c6016c0141f52769d13d752f73ba2c50" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="9047b86c749d8976aa6664e52d4316da83a231535d4770553e93645d070c91da" name="kernel-rt-debug-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="5b7bc001974ecc44432cada22581aafe3d6d31010d5e95258261040de7f62c1b" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="ec614130f681dcf124d990257c87fd801978dae30b5e77407e8486bf9cdaa3d8" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="30c46dc3e1bf19a29cb5f58f041cbe47ff04b7f0c113c2a518e766bb9a601f3e" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="1b7b29c828db4b83cf59712e5a5f0f38fcfb161633ea9c55fb8a83fe2980ceba" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="49516295d7afd365e3328300c5d87e2d8a5776a8a7af830693a920881a4ff375" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="b381e6877e96544c5245340daa87be0ea642d3ac634679e2dc8028db16df1cc4" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="b1f5fcb08cdae4898dec78198d2edaa1b4d1bfe11cfebef12c32db01843bf115" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="3d95ea581560e244e1edac487d317e9a0b80607c709ccdbb465394e29098b3d6" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="4110ebbe3764dba4d55f198f0e8d1629be5fc27a9517b3086cdace2bb607386a" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="9739ef7e7c4549cee316416093435bf0ae986ae3cb2f74ad7d18425f50a9f054" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="c3fc5628e8e19c4bdbedb40abc1d0981222b55bc3247567466265deedc27c03e" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="a0c5d43a9cb22f02ee41aaf0e82cef0b598872526a5e462756f83c039e879c8e" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="93ac943be48284e36fb753b9b1f28462954a72dbc49af5824bafb36ccb761cf8" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9115e6fd5d131d4b3711cae12990fbbfe245aa482f3ce96353f1e17acf0b5a44" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="38a596db06d2c4bf10b5f08c7555981eb3f682a43d5cd162a849deb791a3e9a3" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="004392b37519b752111f66fa90551f07645ec5a387f197219edee5b3cb3ebb66" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1b465a1dea3f168b8dc165acd52af9da325b6ea5bdc17d96b4a650a15b319561" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6addb59e68a199c8ba28e08ce678793d1e09a9da9716c330ffa736853d8a33a5" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="abf5951df1a8a35570ffd55c0bf921d5cdf1b739fdfaaac0ea90ff73a5507f81" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b79295c5abd81735e6fd7b1ddc648a1c04469bf3e15193ee771049bc4f4b947b" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8f8e6652c1dd50605a14b44f2e3db3fc1b111c75b0401961558b6937aa528468" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a6b9f9ae82e4fdba41f74be0ae3607bedf79a870b5eb13780017da8b2ffac183" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="16983acb42c5e81523f804a83df415cd80324e3f5973a1e4c0ca613c59030313" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="70da0d6c287b16fbeecb275810c3c484d0449cc65afce44459648c644d7637bf" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="a174a4499c9c5c71634f9ccaf9833a91635698a5740f9c9ac3e109e442f43d6a" name="kernel-rt-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="e2a69d418a057d55d4c8c6f464e7302eb990b46cde8ae6aa46b32297c9965e6a" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="300118a0a62bdbcd80dce94ff60143f4c79403aa5070fa36e705eb91b3e18b2a" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="daa088d0d1b74e4e504d1df73a614b68765f8ebea613aac5305b99b2b09df481" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="7df9ff080300cf8b736d34a569eebe746652a082d4d91e53baa0047f54fb1e64" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="952b7252676bc971f2bebcf76c8775abb354453a23703d77fd14146801642931" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="3b313aa27a5f31fcb2bbb4198bf2a8fb4f64028be1321b789a37587bfe4a8200" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="e9849e5f6df5e6ed746b58e2dd019114cf80158c39570840ef8548ebca66d9d5" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="758db5da5d650837968b6f81eff06010e62b60ca5f7f193b78c7af4ece5d3864" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="b8ca9ea15d3a439f92ea1eb605afa886b99b243146d6e02815dd28db5e522d92" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="eae2556a455832ca88e605d5f16bba2146a87213018255faddb15e0e7f7d4bba" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="5ac36c5d0134b028a3931ec6b5625efc2ee258e583b6cdb5986d86d699f28441" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="9de35ec35db731e5a1862680266e089d7ba8354005db9a9b838b4331ecc56349" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="5d15be7be10ecf247a120d1dca9877a493f2ad42f9e0215aaf0955ed95b62564" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="5147d0d254210dbed6d62691d200d9ae8e890b9e5fc0d188ec4e355a5d37105d" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2c1dca1effc8de96a37d493e541bfe9855c408bf75e9babe9462bbedaaafb6e7" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4bda3d445de5e3366ee98fd3b302427c0768566aa2913da554bc8b38d289f6ef" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9f2b2cfe46694923e88ae997f5d1b7c94c005a842f3cfb3b95c88210c0716a17" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a03c778d8a543f4e27b1c80d51d93bb2ccddb5f3b574e07eca94121fceda7f08" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a9f1686b2c76253c033d0691e4175b0c790c223cbeb3c6d53db488f67d8d5322" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="654e3f1d29e58fba181f052bb9f0d788d4bcabddf272921438b95c72a23399e2" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a38aacd083dd7584868aaf63d2bd294a1e92eb9993c3c91d3ccb8cc56f34a8a2" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1738ddcfd4fc1771a163fc394fa7a71b5bbb942bf1814aabe06230ab125dd30a" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="cf46127d59055d51267710131df7c26ed4cb45887a6a0022e1070fe609f3bdce" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4f0567a107b05ad498750b356946bcd1d8e3decab43cb5c5a00774b69f5d89fd" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="6fa10ecd30256cb647d16dfc7dc489be94192c14b82869306c18637b3a6bb0ec" name="kernel-rt-devel-matched" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="40a79ce35592a13e2e6a696b72c44a4b577c5b8cdfb3d5cdb797d013b6575055" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="abb283c67b64c0126c033c6738965fa2dcc06f57210abfc87488f982ca8246d5" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="90d0337077cbf4fc1da791885cee96921f53ed852aaeaaeb582c92950333f41a" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="8ad5e093c8d90e8c5951253a6a02df286a6315de3b96bad9f985974be96ab335" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="53ae1fefef2f8bf188b67c3eb703d0b4fcd9baae982a8bcf1cfd8849299db793" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="a352560896aed021d77e67c3e1c398ad680029bd3066b769acd93ff88ac1c71e" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="a58e28585ce1efb213bb1286ff92c8c04eafe56e15b4653271881409852b1166" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="f139a7e3a65b973b606456c6c970371b51ef02befc673a6df3539ebef3d38a4a" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="adfdab602a1294849aa6bc144cce1481535c7d83a55891f9e3a6cd1b1d968ce5" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="a0109d0c8e7333bfc112d97580a2cc3a7a4c9b19ab6b769a6c201add3d721db5" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="5a9cf55356f3d9dacf4ae768a8ed81ddc8c8bdd106c9c3a5e279439464f48b10" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="ee4c05cca93c829a7e107af4091c72c210bfaf4f9cd9acf99c0069970bf744fc" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="44e78e60e2218cedc649a49ab86863466d4be60dc035c798e30e953a7991d607" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="eb57c08a34342b31222f2b24c419f40fd28c0b7206ec569711c3d241f1ae3fe3" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="bd23635b858c5fcdf54c3cf45c083a89de28520fa9da48aaf763beecf04024b4" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2209f4a9357461c2229e99f0a1775eeac5da951b2a64388bc2f07fb47eaed1ec" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="23f3fec2bd6cdadc4a5708adac2494fe63c2712bef04e1f3758becbd8823c20f" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b65d72c77446a01b446215e88a8e817b29898888b4b03d70826a918caa2d477e" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b76f023e95e452bcc6a1c7bd04823f63803a626ad30a677771d30364d02e5e8b" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1768f70d50d2f48c1938a91d332c88e070f8a2bb286a4ce0a7375943fa4ef123" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6899d73393823f2cbc1ff0c5e6d8159925706e1f1cfa7bb3c40ea06ef68463ea" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="e337988b173ab8cc94ec08d939c09d5fe4696c04dc01659eae5e2e2b75f3753d" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="e07072fa7f43b15fa19b61d2d5fe05351a9e15fc666659b7f296a4eb352faff0" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9e5f130fef75eb0ba81881b837e5dc5bb82bbc245a2d4381dc6818fabd980552" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="4ac63b95de36056dfc8857fa46dd335bb8b615b98e38f4c2d42ae720993a0119" name="kernel-rt-modules" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="8edca49d7f9b3ca27c4a866e7eb4d02c4e23b916a7aaf40518fd8f191a03e7af" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="941db071db47152cf3339a782edf8901856794eafcbe1f212b9311c2de15db15" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="fbd9f31318451f8da4fb7a2fd6b031a4139089969f263f62f73566d9bd60e167" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="4b45be5a562daab33bf1640835e0b1ec7eef6adbfede7ce74d2de7510b0a87ac" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="da7c200f9c657cd1496de169a69e16641950c47d3b5fc4de4a4f47d7a12f2d0b" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="0cc441f453144329f8bcfddbc2880a02968c77b7457f68bc3bce3c2c45f7a246" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="d24324d30486e2a25773b6f0caa6540fb33343e78ea76f67b140b7bc058f2314" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="d65bd775e5a7de94d52256bb48d31dbb5aaab8585f1cff23aac91bea3428d5d8" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="a8945c5c943ced7fead083219b83c13c6177b7c46e20d0e0156d24b920448f74" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="2fc03f45e21ddd379d6f11432c47429302557f06a53cf0d8dcba9791ee1f7e26" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="6fbf78776365cf5c4613c6c4529e7ba15a270f742fd1c0dff4ed20c54f84b124" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="f1909299fe4a35278a99412d1f4ed73b24e3087b976c16216bc04f6dff53d8bc" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="c50bf4efb853ba23aacadd27430fb4711cb5ac297713cc79feb7ed8149780dc8" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="aeb7e15a2b7e956227e223dc7e261a3725741b32a5850cb0ca8a58b85ef525a0" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d375e40b57971c9cf93873047108d57b1f6bf095af3beb927df140f00d7bed03" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="1a00224deb1e6c7cae0c213f2db163a5d4a4c7c177ad168f55773ea70994fecc" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c07634d85ae64863bb0c12f686bb9c99074d197416b591a0241ada5b169e2dde" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="296e6661d0eaa02790454812de0dceb85f8225c4f36c0a15942d6660505ef6b1" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="6331e7edc7b13fcc79154128eae6b819d8c371afee6bf3a7fc9fd3ef2e73adef" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b5ddb1135c082d00d9da64eaaf562df0fa9745cab904461331e41961d58ac8df" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="a9dd1271b312cc703d2c5672f2eb0ecfbca8b4b0fab427fcc4ade8351fca3012" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="38568f447139684e036068b98ce564eadf39aeec2cf204d3255dbf152173fa2a" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="65576556bf53c1058c0038d4eeb4a63aaeeea1f66b0b2a659cfa4a99eb1e0e6c" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2827feee70b19968ee55f30a256699781debc0a4c04e11d2f20fd503dd71d724" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="1a5362333c01753861e9aa667720177768091612fd4b87dcff643834186a779f" name="kernel-rt-modules-core" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="455479931d4d9cfdab551a30c409cad20653c92024e774ec9c537cee31e867b7" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="ee881ffa24750408404dca617e579e4a832b7b341acc5481e0d031515a91b34d" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="a96615d2693833930d1735ef5c2f1019ad8213ab86f144a3f1b8c93340af184b" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="676995cc437d82b5e55ae7322f7f84cfefe522cc48d891b667cd7e2bb5acce9e" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="828b5aca952742e5298c2c444c08ebfacd7d9100b67031db98ec358b79400060" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="cb880dbd6e3b7748f314e9a1c18b48f9ba99da2434754df31d8d6d56411d5c73" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="01a8c42a6f1595ca0ab1e0e2646ba154657185ce15622642c743e850b72c59e2" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="d77be23ed31257d47ea0a403ed1875a9f2da56ac26b922620e189bbb8ad8640b" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="202b9bb42fa4f248337b13b562be0425683c04a618e8e19e8927c96995a57467" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="9f716a1080312c36ba80d697dfa850251b1edab1187b32478e79e041a9234d95" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="6609d8e4bef23ce593f3e751c272352b2bd6ccbc1bf08ff8c01640fa6980780c" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="60932140f5d4525c83aff077bd0ee7340092a148e8a854a593c3ffac21daf193" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="969fae1ab5282ff139f5433a5f94a1e0204d3261b4ef97db88ddc89e0e56d813" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3879a1947bd648a04de77d24bb5ecf91845a82044bf5a531e769808a19869bea" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c6ab94e8de1d37e617793718f4a82c5fcc353be122262fb58b142c03f9e81fd4" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="47a68348d92d9182d10d28613e90f4ff815b6209c2edf862ca092b4151c4c4b5" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="95513660fb8542f984adeed00dd8f24b1fb8be300f2c52819bae2af8827cb7c8" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9aa386ff193ed7c9d4a494c65683da9109a844a0925251293980ca06ad23237b" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="59c5e8f2329dc0024421de1af295fbb45bfc3d7436cfa150adf70e9500af1960" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="cb19efb637723576b01b8dce289843da4280a60e7d98a45354f3c792ee6d520a" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="4d4931eaf5f96f4f2be41e519f548a8fc70cc3adbd0ef8bdb2b0bfbcbd69c173" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="fcafaf519416e0e6c296b3244c0c599834a82cd7acd4d20774ca5c88fb2d7dc3" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8f8db8def9ef740f943d49d0d4743299b05eabeeb91b5497480c9639e3a91391" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0f8ea771ba60df8234e63d9de2c569a3699770c0762b44176b368f6bd41269c4" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="afb32e0b0a07951538cd0f38b875d189f942939becd082ddcd5de4c490202fb4" name="kernel-rt-modules-extra" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="446ddf023afca6d6cdbc68f76a8a751f205e6b2f236742170f79530d4b2831b6" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="171d6a894968acc154ee4bbd4ceac87f1cbbe33aab25126a4af721f14cfc8b4a" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="6bba2118562cf4680be6137a795270f3785bd04a2468d4d29f0c096bd7771361" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="bc268e2ddf84064cfe8dc9983200eaf2051a7f8f5f137ceb3b1a37acbf2050c9" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="1384fc51eb968c77dc7123b47d114c67166fea633b66a19875ae6a4be0772116" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="ba694898fc4ba0c8cb7746fd0a54e5139715668784456a7e177b5e64a4c490ab" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="35b55b90babf43b36324557a080b21c56cca434f58632df73a401ee9a40254a3" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="2e661611db068c3316b55152edacafe6f792789cd3e251a6794062dc16b3972d" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="baa6012f17a007b55bdf9893f09d7d41fbb30c85b1b6ade9f4e77f52c28523f6" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="48335f193618b186961203dff2880054be3be510c111b3f9c56467d83949dddd" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="148f3af7f47b23d51a427784fbbde0adf4665e21429793cd09ea31b275876ebe" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="6e0edad2b251c5de47e92e9c7275b50fed92c6aa271746dc279ab727ef0e423b" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="55f302a1e109f64c886877c11bdc4521e3fff64a1e72e20f5802989a8289f7ea" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="addc157724023232b1b90966160f7221b52c5234fb3c97497e87238ef4b10b96" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="57ab7e0f05248cef6e56a2052d88128d19a598ee3c76c72aa9c70b5bb7be2a68" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b5de465b60fa2756a900678d4439f5a7bbbb268f325b9f87e86e66ce5090422a" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="668d681a1f3d4fc19673c366425380cc01793852ecb300b0f94b1351225a668f" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="befd22d04f073f0fdcb948337a74f5260863f32a6b9c08a20d2f52468044aac3" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="30403852fdebe5115c6ea80135d3ad117d127ecec161d06a3d1bd71ee15e6b9a" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c234bc24f5e9941fa68979168690388cc07bebd60f92e6824929eb958a845be7" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9168a3d49eb081a81e8097acf0a310677e8d312e2e594ac65e7f8cc908995345" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c3ce0f548dff63d99a48ecef297806feb6ae3ae5ec5048b555641ce6790b73f3" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c1cda8b7bfa426774e109daecf6010005e4ab7deed1d4f32bfaac08f3e4847d9" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="8d4bc8a9a36e13fb93a1a5243d71ec7beabd3141680ca199a8031d728e82d9b2" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="ae155968f8b3d1773473432160af313113a1984fad5687b6ce15fd3570984284" name="kernel-rt-modules-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="86ce9418302676ce108a2d31946eb1ec28d3ca6d9d7dbe40f0cda69f804df372" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="509c461de0302e9ba3b0d823992fb6cd1c0ae584614d11b487eef954439da960" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="52fa596de2d178a09bf2c03dfad9524269fc1e1ced1d0e40ac875f92f0234b55" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="57ab9337e3f448dba54461425d562190676ca1a5cb4822d6bb786ad66ed2e6e1" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="0405fa28ac1709238ef3c1fe889e47bafeb7733583866a7b4e2c1a3875354147" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="a86a7e637b967fd07be8a0bc69ab6a2695a07cbbb5368f6bdf249eea1329b934" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="1bff44d6c15e293220a1b14c8b6244d57320e7b979c02db4b99466dc10a1f817" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="e8d10cd0da633ce66e97371d570914c9a0bc96897e5d968cf8015d2e6c151cb8" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="6b937faebdc3d08b4c4d4219b959442d56d6d7d48b9956893912e4fcdeb5ac05" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="3f595a83409ab425417e5260b0d7843c11759ffe9ad43078a203664bd4a51546" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="52e3036c76135091668c6f06f58bb86ba90fd2a31af744a9ef18d533a26aa8b1" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="47ada86558e9f7a10a1fcad3302d5890fbaf9a2c80d5668b14a462a7b6a6724e" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="72dfbec63cb8dc6674e4aa705b53ae927bd3dcac7d5a41f10f4bc71edf95a3f3" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="deca11f668a709293559c50081c047008331844435194727988d38c4958ea8de" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3dcd71f0dd4d8b0fe58cfe87263ecd01cd7303e18bc3fd44cba7ee3fa13f24d2" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d7a0480c8542cfb85da678e1fd97220e612ca316f94b89a4a2643faa0edf359e" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d0e5873afe7817f831ae35a6adc875a1e005ad98ab80bd1f9da27699eb109dd1" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="b252ce46d10280c8f716d8d159c169132db22122815d996d6ee6ad8ab9b5e737" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="d2d8d5365cb81604e54ec5a1c03da53789abcd1b398cd6b10a81663b99e540cb" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="68a91faa2cbc363fd4bc5a3bf167516caa3791524417cee4ffe0b0c8080422ed" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="12a167214895ad1b504361e2dcbb90cbe1a7a45a33599fce2d2ec2e7071639b3" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="45202dd03e70df0cacb53bbc41ce08403ea87c1a1f3d76d5dce40b708c43a9a5" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0457aace172430411c0a6e8e312a9acacde24e02f2994bb087ddc07f48dd39fe" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="858e73079989b726a5b2c7f09d42be21a1c3b38730d9a96a1e876d84291766e4" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="983ce5bf244fd7a0559db8f3d098f755c7723e865136d8da037f8045b7fa0718" name="kernel-rt-modules-partner" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="c87271540b6211c07aab3427738f7bd81dcb0f88128533724012dbea347ef986" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="cb164212084a53aba66653df918261ec65bfb56fe52dde0c44fb66141f2782d1" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="15799fb93cbcbebcaa62b6c8ee8f9996e2da9c4d494067737e54d87f7979ba95" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="9d22c805478b0c4cad27e9e3f6580b6ce781747acec7bc7e7cac6acf54fcd617" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="5197d7e25f29c50216f5fd4c5fd7a51743b832aacf4edf409b234eeec52ae9fc" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="2c885b28e935a00677dcb83b956f4333d1f3ba9b0a164f32716e4add6b2afa1d" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="7ea4214dcecbf8179d89a4cbc255607e0047775da2f03c16e447c41dd14b8ccc" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="57498f7b53ae6621b78b088ff126aafc3c3f3fde83085539877ab9e8373d10b6" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="269b5dfa4a4e6764577dc7c2af06b3e361c4688aaaed9cbbb9aa8fa4bda5abad" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="d628a83b826dc2ab74b64f41f50d2eafae053fcb5af9e7f55c2618596e467e30" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="429008c787c0b1cddf5ba7753b8af2d8c263f68e8dd89aa62b6e55185524b8fb" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="c5a43421085a604fa9003f88f27ee12d26988f14643d891fec616bc386c2953b" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="ae9202d241aa748a182e208ae0b0691b000ef3078e3c7be08bc8ba3f0c5d64cd" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7e3f44bfa82d958f7a9aedd47bbf4bd2cd2102153718fc600205fa08bf4500fe" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="411ab6f526ef65e90f7d2fe120ff32f82d80dc5bc0f7672b33bbf181a00436c8" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c3e7b17d16cf7a532343df64af9aad4703b115542f37e1202aeff9717c74f5a4" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="10a38fb25b5520b25e46ed095a313fbbea89f0c1cb9d090a1a51fd012dd98c9e" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="3afced44fc1676ba1688a3dfe187b5407f4c2cc851933c4856936e3114f32b73" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="581a9498ed17a4ac8104d0e7b8414144417e354c0fd44a1f86d1ec403302a677" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="35aac1a08f58480bac4fd5eadefc3681026780334aa17005d1611d1a53a3e0ed" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="7d0d0583151722b38467d0a296de80521659862a21ba899045078292262a1609" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="19205d2172c11cd6a5cda1654381f5442566a5feb2c542ac3e5a6fdb96952a97" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="2b53ea59aa55e5970b6fcaf942ebcc050233e4b24a8f03bac7ddb62cc40f0d2b" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f9e73b247e52879915384c4bffcb5237a9cc6d44f447c032f4bf4357399fd135" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="fef2d28e6fe9079407b2e8a4f25c2a3b3f90c213961ad2e96b98652eb21a2f1b" name="kernel-selftests-internal" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="0e5858903763e497e9d2895e5a16010ffd5503473dde100ce062a1a489b888d6" name="khmer-os-fonts-all" arch="noarch">
  <version epoch="0" ver="5.0" rel="36.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0-29" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0-30" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 5.0-31" date="1597752000">- Convert to new fonts packaging guidelines (rh#1828983)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.0-32" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.0-33" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 5.0-34" date="1621598400">- Resolves:rhbz#1961996 - Add gating tests</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 5.0-35" date="1621684800">- Resolves:rhbz#1961996 - Fix the syntax for path_prefix in tests.yml</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.0-36" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b6bfcaad969fab7bd6390cfd17c501e5dca52994f42bc953edaacf5c3457cb36" name="krb5-tests" arch="aarch64">
  <version epoch="0" ver="1.21.1" rel="10.el9_8"/>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-3" date="1720180800">- CVE-2024-37370 CVE-2024-37371
  Fix vulnerabilities in GSS message token handling
  Resolves: RHEL-45402 RHEL-45392</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-4" date="1729166400">- libkrad: implement support for Message-Authenticator (CVE-2024-3596)
  Resolves: RHEL-55423
- Fix various issues detected by static analysis
  Resolves: RHEL-58216
- Remove RSA protocol for PKINIT
  Resolves: RHEL-15323</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-5" date="1737115200">- Support PKCS11 EC client certs in PKINIT
  Resolves: RHEL-74374
- kdb5_util: fix DB entry flags on modification
  Resolves: RHEL-56059
- Add ECDH support for PKINIT (RFC5349)
  Resolves: RHEL-4902</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-6" date="1738152000">- Prevent overflow when calculating ulog block size (CVE-2025-24528)
  Resolves: RHEL-76759</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-7" date="1742904000">- Add dedicated tests sub-package</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-8" date="1744977600">- Do not block HMAC-MD4/5 in FIPS mode
  Resolves: RHEL-88704
- Don't issue RC4 session keys by default (CVE-2025-3576)
  Resolves: RHEL-88048
- Add PKINIT paChecksum2 from MS-PKCA v20230920
  Resolves: RHEL-82647</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-9" date="1769774400">- krad: packet ID fetched from uninitialized variable
  Resolves: RHEL-145355
- Create sub-package for xrealmauthz KDC plugin
  Resolves: RHEL-67468
- Improving kerberos ulog resize efficiency
  Resolves: RHEL-145359</changelog>
  <changelog author="Julien Rische &lt;jrische@redhat.com&gt; - 1.21.1-10" date="1777464000">- Fix NegoEx parsing vulnerabilities (CVE-2026-40355, CVE-2026-40356)
  Resolves: RHEL-171590 RHEL-171596</changelog>
</package>
<package pkgid="030d4cb971fbc04574f1796b0ef60a41b0625cb9b9c421417bbbf8c3959f310c" name="kronosnet-tests" arch="aarch64">
  <version epoch="0" ver="1.28" rel="1.el9"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.24-1" date="1657886400">- Rebase to 1.24
  Resolves: rhbz#2024090</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.24-2" date="1657886401">- Fix libnozzle tests failing &amp; covscan warning on api_knet_handle_new test
  Resolves: rhbz#2024090</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.25-1" date="1674043200">Rebase to 1.25 for PMTUd fixes
  Resolves: rhbz#2161168</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.28-1" date="1696852800">Rebase to 1.28 for startup and performance fixes
   threads: add config check to match min value with pong timeouts
   rx: allow links to be active faster
   links: fix ping interval and pong timeout value checking
   crypto: Try crypt and decrypt on crypto_init
   tx: Remove expensive memsets
   log: Add a TRACE log level
  Resolves: #RHEL-11787</changelog>
</package>
<package pkgid="961e548b349d8a52085588fb2e8d4fd917f8e05233659b91e5ab7a31dce9fe27" name="lcms2-utils" arch="aarch64">
  <version epoch="0" ver="2.12" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.10-1" date="1591185600">- Update to new upstream version.</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.11-1" date="1592395200">- Update to new upstream version.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; - 2.12-1" date="1612785600">- Update to new upstream version.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="eee2ee69186238a0a961839e9f26951e69c971a10a372d6acc86e40972ac8e18" name="lemon" arch="aarch64">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="73ff5107c5cde22330ed54ba0f98a1c4d4b5799bc4f90981e283ca159b18c0c4" name="lemon" arch="aarch64">
  <version epoch="0" ver="3.34.1" rel="11.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-10.1" date="1785326400">- Fixes CVE-2026-11824
- Resolves: RHEL-218281</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-11" date="1785326401">- Fixes CVE-2026-11822
- Resolves: RHEL-218273</changelog>
</package>
<package pkgid="b126b8779be9018344b8e9fc3aaef7366cea687e703c054ba82349f673f899ac" name="leptonica-tools" arch="aarch64">
  <version epoch="0" ver="1.80.0" rel="4.el9.1"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.79.0-1" date="1578052800">- Update to 1.79.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.79.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.80.0-1" date="1596110400">- Update to 1.80.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.80.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.80.0-2.el9.1" date="1612872000">- Make gnuplot build dependency optional, used only by tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.80.0-3.1" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.80.0-4.1" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1543cec788287dc57bfd525ed005b348cac122e5d576fc414e246dfe40377814" name="lftp-scripts" arch="noarch">
  <version epoch="0" ver="4.9.2" rel="8.el9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 4.9.2-5" date="1746532800">- Ensure proper closing of TLS connection
- Resolves: RHEL-90997</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 4.9.2-6" date="1750939200">- Improve fix for close of TLS connection
- Resolves: RHEL-90997</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 4.9.2-7" date="1751544000">- Do not wait for server close-notify on TLS close
- Resolves: RHEL-100406</changelog>
  <changelog author="Michal Ruprich &lt;mruprich@redhat.com&gt; - 4.9.2-8" date="1759924800">- Adding a timeout for TLS close
- Resolves: RHEL-113471 - "cannot seek on data source" in TLS lftp sessions</changelog>
</package>
<package pkgid="32ff2f5e2e3d4f49fd9ea049e6f11e67d6e29af2d74c0a4d131b8452d5cdcc24" name="libabigail-devel" arch="aarch64">
  <version epoch="0" ver="2.9" rel="1.el9"/>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.4-2" date="1700136000">- Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
  Resolves: https://issues.redhat.com/browse/RHEL-16614
- Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  Resolves: https://issues.redhat.com/browse/RHEL-16629
- Add git as a build requirement as we need git to apply the patches
  aboves that apply binaries.
- Use %autosetup to handle applying the patches using git.
- autoreconf after the patches touched at least one Makefile.am file.</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.4-3" date="1700222400">- Fix SPDX Licensing string</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.5-1" date="1713873600">- Update to upstream 2.5 tarball
- Drop patches (as they are now upstream):
  0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
  0002-suppression-Add-has_strict_flexible_array_data_membe.patch
- Add BuildRequires: python3-devel
- Remove BuildRequires: %{_bindir}/python3</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.6.1" date="1731067200">- Update to upstream 2.6 tarball
- Update to changing SONAME (libabigail.so.5.0.0)
- Add BuildRequires xxhash-devel
- Disable abidb as its dependencies are not present in RHEL 9.6
- Resolves https://issues.redhat.com/browse/RHEL-64069</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.7-1" date="1744632000">- Update to upstream 2.7 tarball
- Add binutils-devel as buildrequire to potentially enable the CTF
  backend.  This will allow the enabling of the CTF backend for
  binutils-devel &gt; 2.35.2
- Update to changing SONAME (libabigail.so.6.0.0)
- Add --enable-ctf to the configure command line</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.8-1" date="1751889600">- Update to upstream 2.8 tarball
- Update to changing SONAME (libabigail.so.7.0.0)</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.8-2" date="1752062400">- Rebuild for c9s
- Resolves: RHEL-102573</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9-1" date="1763121600">- Update to upstream 2.9 tarball
- Update to changing SONAME (libabigail.so.8.0.0)
- Simplify the %check section
- Resolves: RHEL-121666</changelog>
</package>
<package pkgid="57b38cc60445bcfdd74267a441a7d34c58d44f5b3b29a45ed4dac48780172314" name="libabigail-doc" arch="aarch64">
  <version epoch="0" ver="2.9" rel="1.el9"/>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.4-2" date="1700136000">- Apply patch: 0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
  Resolves: https://issues.redhat.com/browse/RHEL-16614
- Apply patch: 0002-suppression-Add-has_strict_flexible_array_data_membe.patch
  Resolves: https://issues.redhat.com/browse/RHEL-16629
- Add git as a build requirement as we need git to apply the patches
  aboves that apply binaries.
- Use %autosetup to handle applying the patches using git.
- autoreconf after the patches touched at least one Makefile.am file.</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.4-3" date="1700222400">- Fix SPDX Licensing string</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.5-1" date="1713873600">- Update to upstream 2.5 tarball
- Drop patches (as they are now upstream):
  0001-Bug-31045-Don-t-try-setting-translation-unit-for-uni.patch
  0002-suppression-Add-has_strict_flexible_array_data_membe.patch
- Add BuildRequires: python3-devel
- Remove BuildRequires: %{_bindir}/python3</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.6.1" date="1731067200">- Update to upstream 2.6 tarball
- Update to changing SONAME (libabigail.so.5.0.0)
- Add BuildRequires xxhash-devel
- Disable abidb as its dependencies are not present in RHEL 9.6
- Resolves https://issues.redhat.com/browse/RHEL-64069</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.7-1" date="1744632000">- Update to upstream 2.7 tarball
- Add binutils-devel as buildrequire to potentially enable the CTF
  backend.  This will allow the enabling of the CTF backend for
  binutils-devel &gt; 2.35.2
- Update to changing SONAME (libabigail.so.6.0.0)
- Add --enable-ctf to the configure command line</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.8-1" date="1751889600">- Update to upstream 2.8 tarball
- Update to changing SONAME (libabigail.so.7.0.0)</changelog>
  <changelog author="Dodji Seketeli &lt;dodji@redhat.com&gt; - 2.8-2" date="1752062400">- Rebuild for c9s
- Resolves: RHEL-102573</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9-1" date="1763121600">- Update to upstream 2.9 tarball
- Update to changing SONAME (libabigail.so.8.0.0)
- Simplify the %check section
- Resolves: RHEL-121666</changelog>
</package>
<package pkgid="5f8fe65904c1cf85d311b068b09ef2fedae51f923ef0e90a7b58f8ed54ec6a51" name="libabw-devel" arch="aarch64">
  <version epoch="0" ver="0.1.3" rel="7.el9"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.3-1" date="1566043200">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.3-3" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.3-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.3-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d2aaccf22733bb859378862e8dd99f218ed8def6d959eaba67c8faca060e9ae3" name="libabw-doc" arch="noarch">
  <version epoch="0" ver="0.1.3" rel="7.el9"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.3-1" date="1566043200">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.3-3" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.3-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.3-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="310291a0e766dc35494773bddc88bec6571929b6b038937b85f0912b88e6498e" name="libabw-tools" arch="aarch64">
  <version epoch="0" ver="0.1.3" rel="7.el9"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.3-1" date="1566043200">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.3-3" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.3-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.3-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="902992473291d252e36fcddebd75217934529c1803a3b5b7b023f4f7eace7c70" name="libadwaita-demo" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="2.el9"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.42.2-1" date="1701950400">- Initial RHEL packaging based on Fedora package with rpmautospec disabled,
  disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
  be able to compile with glib2 2.68 (thanks to Milan Crha)
- Resolves: RHEL-3234</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.42.2-2" date="1704196800">- Add gating configuration (needs a new build)</changelog>
</package>
<package pkgid="08aaf81aa50d76f7d53e38aeba08dddc5d9caf846a19077fe659065dee4723a3" name="libadwaita-doc" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="2.el9"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.42.2-1" date="1701950400">- Initial RHEL packaging based on Fedora package with rpmautospec disabled,
  disabled documentation (no gi-docgen in RHEL 9) and downstream patch to
  be able to compile with glib2 2.68 (thanks to Milan Crha)
- Resolves: RHEL-3234</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.42.2-2" date="1704196800">- Add gating configuration (needs a new build)</changelog>
</package>
<package pkgid="b80bc2a32cd9dd65246f6517a17b118acb3dc4c40bab454e0fd05b5139af30b1" name="libadwaita-qt5-devel" arch="aarch64">
  <version epoch="0" ver="1.4.2" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.4.0-1" date="1629892800">- 1.4.0
  Resolves: bz#1968275</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.4.1-1" date="1637064000">- 1.4.1
  Resolves: bz#2023181</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.4.1-2" date="1648814400">- Rebuild (Qt 5.15.3)
  Resolves: bz#2061416</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.4.1-3" date="1650628800">- Bump build to build against correct Qt version
  Resolves: bz#2061416</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 1.4.2-1" date="1681819200">- 1.4.2
  Resolves: bz#2175754</changelog>
</package>
<package pkgid="ef8bd820fa6f50b3fa22372e87338ff3b3564b1b902b614e3b880148cf396039" name="libappstream-glib-builder" arch="aarch64">
  <version epoch="0" ver="0.7.18" rel="5.el9_4"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.7.18-5" date="1714132800">- Backport a patch from upstream to fix handling unknown tags in AppStream metadata
- Resolves: #RHEL-34564</changelog>
</package>
<package pkgid="70af9599f16b2aaf76abb160b3bbe0aa4e92d7e85dbea209343f4a292bca345c" name="libasan-static" arch="aarch64">
  <version epoch="0" ver="11.5.0" rel="14.el9.alma.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 11.5.0-14.alma.1" date="1774872000">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="2537fb00374e8c2898d9601c94bcd643cec0a6e4793dd61e952cf4575773952e" name="libatomic-static" arch="aarch64">
  <version epoch="0" ver="11.5.0" rel="14.el9.alma.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 11.5.0-14.alma.1" date="1774872000">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e0b090f7f152a19246995c616a66d2c99fd0ccd6336031fc1aa9640c642be1a7" name="libatomic_ops-static" arch="aarch64">
  <version epoch="0" ver="7.6.10" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.6.10-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 7.6.10-4" date="1581940800">- Fixed error while loading shared libraries in tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.6.10-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.6.10-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7.6.10-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7.6.10-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6c7e0fd319352481fb56fa4ddedbf6e9637b24ef8851eb8be8e6a6e4d6553cf8" name="libbase" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="31.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-23" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-24" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-25" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-28" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-29" date="1614081600">- Related: rhbz#1895921 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-30" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-31" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="04ac6a3330adbb8f9946f36ab305da9d7f1a94c61e986291fb8f738fcd288478" name="libbase-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="31.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-23" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-24" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-25" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-28" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-29" date="1614081600">- Related: rhbz#1895921 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-30" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-31" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="47fe4c9536bcd127c9d996c723deb52360ebd7655b7728638f035e10dbbb457a" name="libblockdev-crypto-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="e38f6b722f6de18d29e1e840dd6f1aed419c8fc573a9bb9fde558c998aeedf55" name="libblockdev-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="aa39b5e16b2b47d0935f0a1707be3fe3fe02b264837476014482a5252bf34a93" name="libblockdev-dm-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="42cd7febfa3590264837b7512c24ea8b326263157c03534b3bb6f36106718a9f" name="libblockdev-fs-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="b985716f4d01d3ac64c3faf0556946b996565ed4cbfc918801b94dcba39a1b13" name="libblockdev-kbd-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="49cbeca7ad57aad4d272fab39590dd2cda92ad073e2bc68eb6d511f480d2bb3d" name="libblockdev-loop-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="5aa00119ed855cd880d93630d56e6d51d9cb62f8df3612f8364bfa0f6d82bdda" name="libblockdev-lvm-dbus-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="fd96aef513172d08410ed60ec12acbdb4c42c6edc46891e4b5c15ff8eebef115" name="libblockdev-lvm-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="53c2c8e094324de4b5e3713796abe7b29ceb7a8f23dcd21a524f3eb5f305c414" name="libblockdev-mdraid-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="b26a84dcc7ad393e52f87b10ff840d84f294634f5e1766226c17990f0cb30d3b" name="libblockdev-mpath-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="6f16fda8a27b8d8b78f9f5d4180fa6ab1d738ebc69d50efc5393d4d4b6a1f76b" name="libblockdev-nvdimm-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="0da2dded771c1b39505239b3c0163262e0525df6fd8c10571af2a239b1a46660" name="libblockdev-nvme-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="e83e8590237e9be7671ba546416ecfd784b47d84b0479fda1b9593060213854c" name="libblockdev-part-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="f08fcc859bde05cc2d727e2e6c5b63b5e1f2e964271ee1a8a3d3ce02f23a25e5" name="libblockdev-swap-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="54ba8d18d071307d1399d50b176ad88b149f05dea8d1f52b0f429371d9e45452" name="libblockdev-utils-devel" arch="aarch64">
  <version epoch="0" ver="2.28" rel="16.el9"/>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-9" date="1698840000">- nvme: HostID fixes for TP4126
  Resolves: RHEL-1375
- nvme: Stack smashing fixes
  Resolves: RHEL-13127
  Resolves: RHEL-8037</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-10" date="1699444800">- lvm: Add support for starting and stopping VG locking
  Resolves: RHEL-15921</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 2.28-11" date="1701172800">- tests: Remove unreliable nvme attribute checks
  Resolves: RHEL-16126</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-12" date="1726747200">- nvme: Add bd_nvme_is_tech_avail to the API file
  Resolves: RHEL-59588</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-13" date="1741694400">- crypto: Add a function to set persistent flags for LUKS
  Resolves: RHEL-82886</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-14" date="1750680000">- Don't allow suid and dev set on fs resize
  Resolves: RHEL-96039</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-15" date="1759752000">- lvm-dbus: Fix calling lvcreate with empty list of PVs
  Resolves: RHEL-113928</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.28-16" date="1761825600">- tests: Adjust sizes in generic FS resize test for VFAT resize
  Resolves: RHEL-124142</changelog>
</package>
<package pkgid="7f1e89abc501405fbe08307539fb1f59ba60576f71b47942e2d3c6be20866fbb" name="libbytesize-tools" arch="aarch64">
  <version epoch="0" ver="2.5" rel="3.el9"/>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.2-1" date="1580385600">- Require the same version of python3-bytesize in libbytesize-tools (v.podzimek)
- src/gettext: fix warning if gettext is already present (giulio.benetti)
- Update README.md (vpodzime)
- fix build on shells where test == fails (tbier)
- Add POT file to git and do not rebuild it during every build (vtrefny)</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.3-1" date="1590062400">- Fix memory leak in bs_size_new_from_str (vtrefny)
- Translated using Weblate (Turkish) (oguzersen)
- add translation platform widget (jean-baptiste)
- Update translation files (noreply)
- Do not regenerate POT file during 'make release' (vtrefny)
- Remove Zanata from our build and release processes (vtrefny)
- Add PO files to git (vtrefny)
- Sync spec with downstream (vtrefny)</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.3-2" date="1590235200">- Rebuilt for Python 3.9</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 2.3-3" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.4-1" date="1596196800">- Add Travis build status badge (vtrefny)
- Add Travis CI config and Dockerfiles for running tests (vtrefny)
- Add ansible playbook for installing test dependencies (vtrefny)
- remove msgcat dependency (Aduskett)
- Translated using Weblate (Bengali (India)) (akarshan.biswas)
- Update translation files (noreply)
- Added translation using Weblate (Bengali (India)) (akarshan.biswas)
- Fix library version in pkgconfig file (vtrefny)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Vojtech Trefny &lt;vtrefny@redhat.com&gt; - 2.5-1" date="1611748800">- Translated using Weblate (Hebrew) (sh.yaron)
- Added translation using Weblate (Hebrew) (sh.yaron)
- Add support to ppc64le for debian build (74309971+gururajrkatti)
- Translated using Weblate (Finnish) (ricky.tigg)
- tools: Read input from stdin when not running in a tty (vtrefny)
- travis: Print logs after failed tests (vtrefny)
- tests: Run pylint and pycodestyle on bscalc (vtrefny)
- bscalc: Add option to print only single "human readable" result (vtrefny)
- travis: Add --nogpgcheck when using dnf on Fedora (vtrefny)
- Translated using Weblate (Asturian) (fitoschido)
- Update translation files (noreply)
- Translated using Weblate (Spanish) (fitoschido)
- Sync spec with downstream (vtrefny)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d6dec7a15c06f6c49b73b24eab5bd4977b1eefc4bea5730bd4b16c4f817a37d1" name="libcap-static" arch="aarch64">
  <version epoch="0" ver="2.48" rel="10.el9_8.1"/>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10" date="1751544000">- Fix typos in the cap_from_text.3 man page
  Resolves: RHEL-1838</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 2.48-10.1" date="1776772800">- Fix TOCTOU race condition in cap_set_file() (CVE-2026-4878)
  Resolves: RHEL-169312</changelog>
</package>
<package pkgid="17348f33f35eaeb1d277c1059bf579031a4fa512669d5ef796311f12b127718d" name="libcbor-devel" arch="aarch64">
  <version epoch="0" ver="0.7.0" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.5.0-7" date="1582977600">- Fix FTBFS, add version for soname, minor cleanups</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 0.7.0-1" date="1599480000">- update to 0.7.0
Resolves: rhbz#1813738
Resolves: rhbz#1863978</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.7.0-2" date="1600603200">- Avoid hardcoding man page extension</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.0-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3420a77500ec15f45a00c882b9e3d9c70b0153ea74d64fd96f887e01dd0de065" name="libcdr-doc" arch="noarch">
  <version epoch="0" ver="0.1.7" rel="3.el9"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.5-6" date="1572609600">- Rebuild for ICU 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.5-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.6-1" date="1581076800">- new upstream release</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.6-2" date="1589630400">- Rebuild for ICU 67</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.6-3" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.6-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.6-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.7-1" date="1616760000">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.7-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.7-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9da2a405a658d17f186fd66ec1b58fb91a303c47aa83b89ec11432bd06ba7cd6" name="libcdr-tools" arch="aarch64">
  <version epoch="0" ver="0.1.7" rel="3.el9"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.5-6" date="1572609600">- Rebuild for ICU 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.5-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.6-1" date="1581076800">- new upstream release</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.6-2" date="1589630400">- Rebuild for ICU 67</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.6-3" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.6-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.6-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.7-1" date="1616760000">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.7-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.7-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="588acb0e47232b3db1310e379451e28cbab58e53e914d79ccf87ac3153ac9957" name="libcephfs-devel" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="02e3c3f5a4c0748538653e0a14a7abd12e12cb5382c96ef8c48b65d87f1e1981" name="libcephfs2" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f2a6b88899052c508bcc826949cfd0760f48fb9e3bcb05082bb34b3ad168a5f7" name="libcephsqlite" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a732f23b7f0067aa1baa2901915493d39c5be46c9cf8030f820324784b860797" name="libcephsqlite-devel" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="97c1aa2cfd96743699504a515ce1a1c36e2ae2732a16a9dfab65e24daa8fe1bf" name="libcmis-devel" arch="aarch64">
  <version epoch="0" ver="0.5.2" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.5.2-5" date="1590667200">- Rebuilt for Boost 1.73</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.5.2-6" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.5.2-8" date="1611316800">- Rebuilt for Boost 1.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.5.2-10" date="1617105600">- Rebuilt for removed libstdc++ symbol (#1937698)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.5.2-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.5.2-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="40937b0056ad72dcb7436303a657807962950774ed076b56e7b8d10508b84a35" name="libcmis-tools" arch="aarch64">
  <version epoch="0" ver="0.5.2" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.5.2-5" date="1590667200">- Rebuilt for Boost 1.73</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.5.2-6" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.5.2-8" date="1611316800">- Rebuilt for Boost 1.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.2-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.5.2-10" date="1617105600">- Rebuilt for removed libstdc++ symbol (#1937698)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.5.2-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.5.2-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2b029f197e380a9b53a4b6643a79a9ab010525be14972d7062e37bd756dac132" name="libcmocka-static" arch="aarch64">
  <version epoch="0" ver="1.1.5" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-3" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 1.1.5-4" date="1593604800">- Disable LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-6" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.5-7" date="1596628800">- Correctly build with new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.5-9" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.5-10" date="1624536000">- resolves: rhbz#1915369 - Split out a cmocka-doc package</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.5-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8e5e67470eb85e1b57ff9dea0112071ce4973738f36c5d7b87ec0cea6ac4494e" name="libcomps-doc" arch="noarch">
  <version epoch="0" ver="0.1.18" rel="1.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.15-2" date="1590148800">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.1.15-5" date="1596801600">- spec: Fix building with new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.15-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-1" date="1619524800">- Update to 0.1.16
- Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
- Fix memory leaks and resource leaks</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.16-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-4" date="1629115200">- Fix issues detected by static analyzers</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.18-1" date="1635163200">- Update to 0.1.18
- Don't print empty requires
- Remove Python 2 support</changelog>
</package>
<package pkgid="e0ee89c90059e3b32327c7c376a3dcb37a731b18d04eb332f8890575741c7836" name="libdb-devel-static" arch="aarch64">
  <version epoch="0" ver="5.3.28" rel="57.el9_6"/>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-54" date="1714996800">- Add db_converter into -utils subpackage
- It allowes to convert BerkeleyDB database format to GDBM/LMDB format
- Resolves: RHEL-35607</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-55" date="1726488000">- Rebase db_converter tool to the latest version</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-56" date="1740571200">- Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-57" date="1741780800">- Adress rpminspect issue - missing debuginfo for
  db_converter</changelog>
</package>
<package pkgid="507b0fd8e402cab21a744ccfd02e3c094fe84c69b2de50b947b62ac0f59bd620" name="libdb-tcl" arch="aarch64">
  <version epoch="0" ver="5.3.28" rel="57.el9_6"/>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-54" date="1714996800">- Add db_converter into -utils subpackage
- It allowes to convert BerkeleyDB database format to GDBM/LMDB format
- Resolves: RHEL-35607</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-55" date="1726488000">- Rebase db_converter tool to the latest version</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-56" date="1740571200">- Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-57" date="1741780800">- Adress rpminspect issue - missing debuginfo for
  db_converter</changelog>
</package>
<package pkgid="e6304e1bf112d4a73cdaf713fed5236902fe3b02bbec0904b7c5d0be5d2622e6" name="libdb-tcl-devel" arch="aarch64">
  <version epoch="0" ver="5.3.28" rel="57.el9_6"/>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-54" date="1714996800">- Add db_converter into -utils subpackage
- It allowes to convert BerkeleyDB database format to GDBM/LMDB format
- Resolves: RHEL-35607</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-55" date="1726488000">- Rebase db_converter tool to the latest version</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-56" date="1740571200">- Use a fixed path, /usr/lib64/libc.so.6 for 64-bit targets</changelog>
  <changelog author="Filip Janu&#x161; &lt;fjanus@redhat.com&gt; - 5.3.28-57" date="1741780800">- Adress rpminspect issue - missing debuginfo for
  db_converter</changelog>
</package>
<package pkgid="c1f0f3b422bf5cdcc9884c48f3e6c983f8b5bb5edfd4ea466966af1cb12abcc5" name="libdmmp" arch="aarch64">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="32ab382ce5c43b6a270eed96bcba23de395bc2a29be4b860b14d1e730985abd5" name="libdmmp-devel" arch="aarch64">
  <version epoch="0" ver="0.8.7" rel="45.el9"/>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-36" date="1741089600">- Add 0128-multipath-tools-move-DEFAULT_SOCKET-definition-into-.patch
- Add 0129-multipath-tools-add-helper-mpath_fill_sockaddr__.patch
- Add 0130-libmpathutil-add-support-for-Unix-pathname-sockets.patch
- Add 0131-libmpathutil-move-systemd_listen_fds-support-into-mu.patch
- Add 0132-multipathd-move-uxsock_trigger-to-uxlsnr.c.patch
- Add 0133-multipathd-uxlsnr-use-symbolic-values-for-pollfd-ind.patch
- Add 0134-multipathd-make-uxsock_listen-take-a-pointer-to-fd.patch
- Add 0135-multipathd-allow-receiving-two-socket-fds-from-syste.patch
- Add 0136-multipathd-listen-on-pathname-and-abstract-socket-by.patch
- Add 0137-libmpathcmd-try-both-abstract-and-pathname-sockets.patch
- Add 0138-libmpathcmd-honor-MULTIPATH_SOCKET_NAME-environment-.patch
- Add 0139-multipathd-honor-MULTIPATH_SOCKET_NAME-environment-v.patch
  * Fixes RHEL-78758 ("RFE: Enable multipathd to communicate with a
    process in another network namespace")
- Resolves: RHEL-78758</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-37" date="1741867200">- Add 0140-multipath-clean-up-find_multipaths-value-names.patch
- Add 0141-multipathd-Add-multipathd-man-page-section-about-soc.patch
  * Fixes RHEL-82307 ("There is no man page for RFE: Enable multipathd
    to communicate with a process in another network namespace")
- Fix multipath_conf_syntax OSCI test.
- Resolves: RHEL-82307</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-38" date="1744891200">- Add 0142-multipathd-monitor-new-multipath-dev-even-if-we-can-.patch
- Add 0143-libmultipath-add-helper-function-check_path_wwid_cha.patch
- Add 0144-multipathd-re-add-paths-skipped-because-they-were-of.patch
  * Fixes RHEL-82534 ("multipathd does not monitor multipath devices
    created externally while there are offline paths.")
- Resolves: RHEL-82534</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-39" date="1752494400">- Add 0145-multipath-tools-add-DellEMC-ME4-PowerVault-ME4-to-ha.patch
- Add 0146-multipath-tools-add-HPE-as-vendor-for-OPEN-XP8-array.patch
- Add 0147-multipath-tools-add-HP-HSVX740-to-hwtable.patch
- Add 0148-multipath-tools-add-DellEMC-ME5-PowerVault-ME5-to-ha.patch
- Add 0149-multipath-tools-add-HPE-MSA-Gen7-2070-2072-to-hwtabl.patch
  * Fixes RHEL-103109 ("Update multipath builtin config to add new
    device defaults")
- Resolves: RHEL-103109</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-40" date="1759320000">- Add 0150-libmpathpersist-retry-commands-on-other-paths-in-mpa.patch
- Add 0151-libmpathpersist-check-released-key-against-the-reser.patch
- Add 0152-multipathd-remove-thread-from-mpath_pr_event_handle.patch
- Add 0153-libmpathpersist-remove-uneeded-wrapper-function.patch
- Add 0154-libmpathpersist-reduce-log-level-for-persistent-rese.patch
- Add 0155-libmpathpersist-remove-pointless-update_map_pr-ret-v.patch
- Add 0156-multipathd-use-update_map_pr-in-mpath_pr_event_handl.patch
- Add 0157-libmpathpersist-limit-changing-prflag-in-update_map_.patch
- Add 0158-multipathd-Don-t-call-update_map_pr-unnecessarily.patch
- Add 0159-libmpathpersist-remove-useless-function-send_prout_a.patch
- Add 0160-libmpathpersist-fix-memory-leak-in-mpath_prout_rel.patch
- Add 0161-limpathpersist-redesign-failed-release-workaround.patch
- Add 0162-libmpathpersist-fail-the-release-if-all-threads-fail.patch
- Add 0163-limpathpersist-Handle-changing-key-corner-case.patch
- Add 0164-libmpathpersist-fix-command-keyword-ordering.patch
- Add 0165-libmpathpersist-use-conf-timeout-for-updating-persis.patch
- Add 0166-libmapthpersist-Handle-REGISTER-AND-IGNORE-changing-.patch
- Add 0167-libmultipath-rename-prflag_value-enums.patch
- Add 0168-libmpathpersist-use-a-switch-statement-for-prout-com.patch
- Add 0169-libmpathpersist-Add-safety-check-for-preempting-on-k.patch
- Add 0170-limpathpersist-remove-update_map_pr-code-for-NULL-pp.patch
- Add 0171-libmpathpersist-move-update_map_pr-to-multipathd.patch
- Add 0172-multipathd-clean-up-update_map_pr-and-mpath_pr_event.patch
- Add 0173-libmpathpersist-clean-up-duplicate-function-declarat.patch
- Add 0174-multipathd-wrap-setting-and-unsetting-prflag.patch
- Add 0175-multipathd-unregister-PR-key-when-path-is-restored-i.patch
- Add 0176-libmpathpersist-Fix-up-reservation_key-checking.patch
- Add 0177-libmpathpersist-change-how-reservation-conflicts-are.patch
- Add 0178-libmpathpersist-Clear-prkey-in-multipathd-before-unr.patch
- Add 0179-libmpathpersist-only-clear-the-key-if-we-are-using-t.patch
- Add 0180-libmpathpersist-Restore-old-reservation-key-on-failu.patch
- Add 0181-libmpatpersist-update-reservation-key-before-checkin.patch
- Add 0182-libmpathpersist-retry-on-conflicts-in-mpath_prout_co.patch
- Add 0183-libmpathpersist-Don-t-always-fail-registrations-for-.patch
- Add 0184-libmpathpersist-Don-t-try-release-workaround-for-inv.patch
- Add 0185-libmpathpersist-Don-t-fail-RESERVE-commands-unnecess.patch
- Add 0186-libmpathpersist-reregister-keys-when-self-preempting.patch
- Add 0187-libmpathpersist-handle-updating-key-race-condition.patch
- Add 0188-libmpathpersist-handle-preempting-all-registrants-re.patch
- Add 0189-libmpathpersist-Fix-REGISTER-AND-IGNORE-while-holdin.patch
- Add 0190-libmpathpersist-Handle-RESERVE-with-reservation-held.patch
- Add 0191-libmpathpersist-use-check_holding_reservation-in-mpa.patch
- Add 0192-libmpathpersist-Fix-unregistering-while-holding-the-.patch
- Add 0193-libmpathpersist-Fix-race-between-restoring-a-path-an.patch
- Add 0194-multipathd-Fix-tracking-of-old-PR-key.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-41" date="1762862400">- Add 0195-multipathd-Fix-race-while-registering-PR-key.patch
- Add 0196-mpathpersist-Fix-REPORT-CAPABILITIES-output.patch
  * Fixes RHEL-118515 ("There are many bugs in multipath's persistent
    reservation handling")
- Resolves: RHEL-118515</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-42" date="1763553600">- Add 0197-multipath-tools-update-NFINIDAT-InfiniBox-config-in-.patch
  * Fixes RHEL-128396 ("Update the multipath.conf stanza for Infinidat
    storage [rhel-9]")
- Resolves: RHEL-128396</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-43" date="1769083200">- Add 0198-multipathd-print-path-offline-message-even-without-a.patch
  * Fixes RHEL-133814 ("log_checker_err is not printing messages
    repeatedly for failed path [rhel-9]")
- Add 0199-libmultipath-improve-cleanup-of-uevent-queues-on-exi.patch
- Add 0200-uevent_dispatch-use-while-in-wait-loop.patch
- Add 0201-libmultipath-uevent_dispatch-process-uevents-one-by-.patch
- Add 0202-libmultipath-uevent_listen-don-t-delay-uevents.patch
- Add 0203-libmultipath-uevent-use-struct-to-pass-parameters-ar.patch
- Add 0204-libmultipath-is_uevent_busy-check-servicing_uev-unde.patch
- Add 0205-multipathd-make-multipathd-show-status-busy-checker-.patch
  * Fixes RHEL-135904 (VM reboot in RHOSP environment fails with error
    "Could not open '/dev/dm-95': No such file or directory")
- Resolves: RHEL-133814
- Resolves: RHEL-135904</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-44" date="1769688000">- Add 0206-libmultipath-add-purge_disconnected-configuration-op.patch
- Add 0207-multipathd-implement-purge-functionality-for-disconn.patch
  * Fixes RHEL-141291 ("Add purge_disconnected support to multipathd
    [rhel-9]")
- Resolves: RHEL-141291</changelog>
  <changelog author="Benjamin Marzinski &lt;bmarzins@redhat.com&gt; - 0.8.7-45" date="1771502400">- Add 0208-libmpathpersist-fix-register-retry-status-checking.patch
- Add 0209-multipathd-remember-number-of-registered-keys-when-i.patch
- Add 0210-libmpathpersist-fix-code-for-skipping-multipathd-pat.patch
  * Fixes RHEL-148462 ("Improve multipathd's handling of updating
    persistent reservations on restored paths. [rhel-9]")
- Resolves: RHEL-148462</changelog>
</package>
<package pkgid="c382d59ad5d2f1407ec94fa5443d9556d4b49ecc05460b9124019233d226474a" name="libdvbv5-devel" arch="aarch64">
  <version epoch="0" ver="1.20.0" rel="6.el9"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.20.0-6" date="1765454400">- Rebuilt for CRB inclusion
  Resolves: RHEL-135108</changelog>
</package>
<package pkgid="ce3b76694e0ebd698fb391a85e3abef2f16dbbd4c5f83a75205ccb3b93991681" name="libdwarves1-devel" arch="aarch64">
  <version epoch="0" ver="1.31" rel="1.el9"/>
  <changelog author="Viktor Malik &lt;vmalik@redhat.com&gt; - 1.27-1" date="1718884800">- Resolves: RHEL-30780
- New release: v1.26
- When expanding types using 'pahole -E' do it for union and struct typedefs and for enums too.
- Print number of holes, bit holes and bit paddings in class member types.
- Introduce --contains_enumerator=ENUMERATOR_NAME:
- Fix pretty printing using DWARF, waiting for a CU with both class (-C) and a specified "type_enum".
- Add support for DW_TAG_constant in the DWARF loader, first seen in Go DWARF.
- Fix loading DW_TAG_subroutine_type generated by the Go compiler.
- Fix loading of 32-bit signed enums from BTF.
- Add 'pahole --btf_features' to allow consumers to specify an opt-in set of features they want to use in BTF encoding.
- Parallelize loading BTF and DWARF, speeding up a bit btfdiff.
- Do type expansion to cover "private" types and enumerations in btfdiff.
- New release: v1.27
- Reproducible parallel builds: multiple runs with different number of loading/encoding threads produce the same result.
- Inject kfunc decl tags into BTF from the BTF IDs ELF section in the Linux kernel vmlinux file.
- Sanitize unsupported DWARF int type with greater-than-16 byte, as BTF doesn't support it.
- Initial support for BTF_KIND_DECL_TAG in the BTF loader, adding support in pfunct output.
- Fix hole discovery with inheritance in C++.</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@centosproject.org&gt; - 1.27-2" date="1723464000">- Backport upstream bugfixes for clang builds
  Resolves: RHEL-54022</changelog>
  <changelog author="Gregory Bell &lt;grbell@redhat.com&gt; - 1.30-1" date="1750420800">- New release: 1.30
- Better detection of abort during DWARF loader thread processing
- pahole now detects presence of libbpf APIs and BTF features using weak function
  declarations when built using a shared library libbpf
- Type tags are emitted for BPF arena pointers with new BTF "attributes" feature
- New release: 1.29
- Multithreading is now in the DWARF loader using a jobs queue and a pool of worker threads.
- The BTF encoding now is always reproducible, and as fast/faster than before.
- The memory consumption is reduced.
- Support for multiple BTF_DECL_TAGs pointing to same tag.
- Verify that pfunct prints btf_decl_tags read from BTF.
- Don't print functions twice when using 'pfunct -f function_name'.
- New release: 1.28
- Various improvements to reduce the memory footprint of pahole, notably when doing BTF encoding.
- Show flexible arrays statistics
- Add '--padding N' and '--padding_ge N' to show structs with paddings
- Introduce --running_kernel_vmlinux to find a vmlinux that matches the build-id of the running kernel.
- Don't stop pfunct output at the first function that matches a filter, show all of them
- Allow encoding data about all global variables, not just per CPU ones
- Handle .BTF_ids section endianness, fully supporting cross builds
- Generate decl tags for bpf_fastcall for eligible kfuncs
- Add "distilled_base" BTF feature to split BTF generation.
- Use the ELF_C_READ_MMAP mode with libelf, reducing peak memory utilization
- Allow overriding /sys/kernel/btf/vmlinux via the PAHOLE_VMLINUX_BTF_FILENAME env var
- Allow setting the list of compile units via PAHOLE_LANG_EXCLUDE env var
- Serialize access to elfutils dwarf_getlocation().
- Honour --lang_exclude when merging LTO built CUs.
- Add the debuginfod client cache directory to the vmlinux search path.
- Print the CU's language when a tag isn't supported.
- Initial support for GNU_formal_parameter_pack, GNU_template_parameter_pack, template_value_param and template_type_param DWARF tags.
- Improve the parameter parsing by checking DW_OP_[GNU_]entry_value
- Introduce a tests/ directory with regression tests</changelog>
  <changelog author="Gregory Bell &lt;grbell@redhat.com&gt; - 1.31-1" date="1764590400">- Rework the selection of functions to represent in BTF, for instance:
- Skip functions that passes values thru the stack when those structs don't
have expected alignment due to some attribute usage that then causes
problems with BTF trampolines due to lack of expressiveness in BTF to
signal such special cases.
- Skip objects (compile units) without DWARF: don't stop a multi object
encoding session just because one doesn't have any DWARF in it.
- Fix BTF dedup by updating libbpf. 
- Fix the inference of the explicit alignment attribute of zero length arrays,
like struct skb_ext-&gt;data[] in the Linux kernel. Important as BTF has no no
explicit alignment attribute encoding.
- Fix the inference of alignments after bitfields, such as in struct
nft_rule_dp-&gt;data[] after -&gt;handle:42, also in the Linux kernel.    
- Fix segfault with --show_reorg_steps option, e.g. pahole -R -S -C task_struct.
- Add comparision of functions encoded in BTF between baseline 'master' branch
and current branch, i.e. 'next'.</changelog>
</package>
<package pkgid="7f444050fe2846f9704814598571cf0de9b913bad4e52a673f94e9c2a97ecf0d" name="libeconf-utils" arch="aarch64">
  <version epoch="0" ver="0.4.1" rel="5.el9"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
</package>
<package pkgid="00c21579b1a7fa22c6a2d80cec68986313e1f54aebe016e0dda4b41c770c9b92" name="libeconf-utils" arch="aarch64">
  <version epoch="0" ver="0.4.1" rel="7.el9_8"/>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-4" date="1712836800">- Fix static analyzer detected issues. Resolves: RHEL-24989</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-5" date="1765281600">- Avoid double-free memory corruption. Resolves: RHEL-130877</changelog>
  <changelog author="Iker Pedrosa &lt;ipedrosa@redhat.com&gt; - 0.4.1-6" date="1775649600">- Add libeconf-devel to a public repo. Resolves: RHEL-126957</changelog>
</package>
<package pkgid="2629b7c3324e12b6a1134129767a68e9907917c6dc368efef9502b899e175a16" name="libell-devel" arch="aarch64">
  <version epoch="0" ver="0.41" rel="4.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.35-1" date="1606824000">- Update to 0.35</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.36-1" date="1610366400">- Update to 0.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.36-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.38-1" date="1613649600">- Update to 0.38</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.39-1" date="1617105600">- Update to 0.39</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.39-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.41-1" date="1624276800">- Avoid use of inet_ntoa(). Related: rhbz#1967524 
- Update to 0.41. Related: rhbz#1967524</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.41-2" date="1624536000">- add gating test that uses acd-client.c. Related: rhbz#1973511
- drop tests dependency on libell-devel. Related: rhbz#1973511</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.41-3" date="1624536001">- bump NVR to trigger CI</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.41-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8c152428a5ae8e84279a02856cb6bfe727ffad2177e13aa722d050b702ee4cda" name="libeot-devel" arch="aarch64">
  <version epoch="0" ver="0.01" rel="18.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.01-13" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.01-14" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.01-15" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.01-16" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.01-17" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.01-18" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="61b4168528e2a4e3cfe9ea5319626909fa947210c0ced6bc7cff8d5cb16fdfe0" name="libeot-tools" arch="aarch64">
  <version epoch="0" ver="0.01" rel="18.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.01-13" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.01-14" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.01-15" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.01-16" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.01-17" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.01-18" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2234f28566432729b179ef0576d12144cb5ac7c0b69b0a76be3a7bcb0b127a84" name="libepubgen-devel" arch="aarch64">
  <version epoch="0" ver="0.1.1" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.1-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.1-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7092a6064fc0f6cab905e135ff7ec6398abbce6eb2f49753e527c19c6d553f2c" name="libepubgen-doc" arch="noarch">
  <version epoch="0" ver="0.1.1" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.1-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.1-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.1-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f2f89d09a2869e29c0e0c5b10923fe579882c951ad72801f4d9e024314755da4" name="libertas-sd8686-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="155.5.el9_7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-151" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38587)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38587</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="887ed40bd706ebd73f7160efe41edc3febe70fb69b6a0164656574203d1ecb37" name="libertas-sd8686-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="161.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="1b38164dd94bed6f6d5bb0cace99c663aa7f14b6ce7c9eeda0ca353f472db2bb" name="libertas-sd8686-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="161.1.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="340bcad4ab19f5645fc5e3053c021c8b6f62b03ebf9a95aedca15c1ccbbbf633" name="libertas-sd8686-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="161.2.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260804-161.2" date="1787832000">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="d6bff02fee36ef64022eb45c2a34f4825b1c34d28e853e4610ca6af41c5887e1" name="libertas-usb8388-firmware" arch="noarch">
  <version epoch="2" ver="20260411" rel="155.5.el9_7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-151" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38587)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38587</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="c1106bac78d509df3ff2e55276152f89bfa59b675aa8c3311f62e2df6f840101" name="libertas-usb8388-firmware" arch="noarch">
  <version epoch="2" ver="20260609" rel="161.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="76617e7c4643843be1210ee0e0d3f25934736122b424c10d9129ab785f46c9a3" name="libertas-usb8388-firmware" arch="noarch">
  <version epoch="2" ver="20260707" rel="161.1.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="cf51440df3a371de4a62bc35d9ba1acb33b6a3294585927b1e981a63fc0ee2e1" name="libertas-usb8388-firmware" arch="noarch">
  <version epoch="2" ver="20260804" rel="161.2.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260804-161.2" date="1787832000">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="868a68aa303fb7561756472482a469d1eb423214e8b2fd66a210be235b13b915" name="libertas-usb8388-olpc-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="155.5.el9_7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-151" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38587)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38587</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="bae9d8d929b8a3279e94bee80bdc23eda072cba29412e3b7d665a01ffcb1269a" name="libertas-usb8388-olpc-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="161.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="7a6b344078df01e0ab6b7d3392b27c56306abf4ed21e1d7cc911532a62766c7d" name="libertas-usb8388-olpc-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="161.1.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="abd4456d3d9dc25145500ad95bd3b777f56624e5b521b8120e570e30ba3c225c" name="libertas-usb8388-olpc-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="161.2.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260804-161.2" date="1787832000">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="fbe0c3d9ef600cca8a9b7d9fe4ebf0777fd447b01dd513293e0749bcebb68fca" name="libetonyek-doc" arch="noarch">
  <version epoch="0" ver="0.1.10" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.9-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.1.9-6" date="1580990400">- add fix for contemporary glm</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.9-7" date="1591272000">- fix build with latest boost</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.9-8" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.9-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.9-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.9-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.10-1" date="1621339200">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.10-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4411b824c5d076681a44b35dd0bcc1d026e6eb5ac82e78a1d870df491ff4dd52" name="libetonyek-tools" arch="aarch64">
  <version epoch="0" ver="0.1.10" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.9-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.1.9-6" date="1580990400">- add fix for contemporary glm</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.9-7" date="1591272000">- fix build with latest boost</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.9-8" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.9-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.9-10" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.9-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.10-1" date="1621339200">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.10-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="73a7ddb7e2a1c38d6fcd2ead900c7a26fc288dea8328b7781261738243662c75" name="libev-libevent-devel" arch="aarch64">
  <version epoch="0" ver="4.33" rel="6.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.33-6" date="1726574400">- add -devel subpackage into CRB
- Resolves: RHEL-38617</changelog>
</package>
<package pkgid="3d86827ee676a76997cfeaec66b3f2418c6d3b5e7400371a3d965b373f82a513" name="libev-source" arch="noarch">
  <version epoch="0" ver="4.33" rel="6.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.33-6" date="1726574400">- add -devel subpackage into CRB
- Resolves: RHEL-38617</changelog>
</package>
<package pkgid="cda6a4493452d8addfe277ffc744fd35d94f21dc1c7e48ef42ce6171cb0596e0" name="libevdev-utils" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="3.el9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.9.1-2" date="1594900800">- libevdev 1.9.1 - this time with sources</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.9.901-1" date="1601985600">- libevdev 1.10 rc1</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.9.902-1" date="1603195200">- libevdev 1.10 rc2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.10.0-1" date="1603713600">- libevdev 1.10.0</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.10.1-1" date="1610366400">- libevdev 1.10.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.11.0-1" date="1612180800">- libevdev 1.11.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="081ed7a27ce9bd0908a60c4c83b48598bfa9419b4e522d786a7dd2faaca31b17" name="libexif-doc" arch="aarch64">
  <version epoch="0" ver="0.6.22" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.21-21" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Rex Dieter &lt;rdieter@fedoraproject.org&gt; - 0.6.22-1" date="1589803200">- 0.6.22
- .spec cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.22-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 0.6.22-3" date="1604923200">- Fix CVE-2020-0181, CVE-2020-0198, and CVE-2020-0452</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.22-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.22-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6.22-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e84bdb80a74dc594a13c172620ba1c8787296b3fb8cca67477bb795f392cdbdd" name="libexif-doc" arch="aarch64">
  <version epoch="0" ver="0.6.22" rel="6.el9_8.1"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 0.6.22-6.1" date="1778155200">- Fix integer underflow in MakerNote decoding (CVE-2026-40386)
- Fix integer overflow in Nikon MakerNote handling (CVE-2026-40385)
  Resolves: RHEL-170253, RHEL-170234</changelog>
</package>
<package pkgid="8c737f649934725656e85a6b2b6d67bdee29a9baaa542fdb4a37b38c3346b729" name="libexttextcat-tools" arch="aarch64">
  <version epoch="0" ver="3.4.5" rel="12.el9"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.4.5-12" date="1764676800">- Ship libexttextcat-devel in CRB
  Resolves: RHEL-126949</changelog>
</package>
<package pkgid="19f34ea0d34b16a34cd87e883667d12cad63f6e4936d172ea06bb7162a2887a8" name="libfl-devel" arch="aarch64">
  <version epoch="0" ver="2.6.4" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-4" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.6.4-6" date="1598011200">- Re-work flex subpackages and provide shared libraries (#1327851):
- Remove and obsolete the flex-devel subpackage containing static libraries
- Provide shared libraries in a new subpackage named libfl2
- Provide development files in a new subpackage named libfl-devel
- Provide static libraries in a new subpackage named libfl-static</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.6.4-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.6.4-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4f85bddef0e400f1c5251b8b348c5b3e525327f234bb9f632266f6ef0039b25c" name="libfl2" arch="aarch64">
  <version epoch="0" ver="2.6.4" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-4" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-5" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.6.4-6" date="1598011200">- Re-work flex subpackages and provide shared libraries (#1327851):
- Remove and obsolete the flex-devel subpackage containing static libraries
- Provide shared libraries in a new subpackage named libfl2
- Provide development files in a new subpackage named libfl-devel
- Provide static libraries in a new subpackage named libfl-static</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.6.4-8" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.6.4-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="861d9d5bb16aaf47f1a2241988aded73872f97e00e8d2d4524b14f02e857d89e" name="libfonts" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="35.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-27" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-28" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-29" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.3-30" date="1610712000">- Remove ant-contrib support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-31" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-32" date="1615550400">- remove itext patch from source zip</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-33" date="1615550401">- Related: rhbz#1895921 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-34" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-35" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="856ee231b6cd7697492ed650d1295565d029f557e88963e77ed5194e52b443c3" name="libfonts-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="35.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-27" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-28" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-29" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.3-30" date="1610712000">- Remove ant-contrib support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-31" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-32" date="1615550400">- remove itext patch from source zip</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-33" date="1615550401">- Related: rhbz#1895921 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-34" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-35" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9cc8b6fa243a7ae4e8e37ed80a6ab4c8277e62268d10aad0d9ecb24714011d38" name="libformula" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="32.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-23" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-24" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-25" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.3-27" date="1610712000">- Remove ant-contrib support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-28" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-29" date="1614081600">- Related: rhbz#1895921 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-30" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-31" date="1621425600">- Resolves: rhbz#1963838 restore missing functions
  Remove ant-contrib support dropped compile.res_copy target so
  .properties files didn't get included in the jar so libformula
  didn't use its built-in loaders so libreoffice's database
  report generator didn't show all categories in formula wizard</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-32" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8604ceefc37e24e2dfb9971fd158696ad2ba83d12e94c384c2bb121650acf131" name="libformula-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="32.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-23" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-24" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-25" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.3-27" date="1610712000">- Remove ant-contrib support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-28" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-29" date="1614081600">- Related: rhbz#1895921 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-30" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-31" date="1621425600">- Resolves: rhbz#1963838 restore missing functions
  Remove ant-contrib support dropped compile.res_copy target so
  .properties files didn't get included in the jar so libformula
  didn't use its built-in loaders so libreoffice's database
  report generator didn't show all categories in formula wizard</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-32" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f23cb597c9e836571a38213817981afdee21ca501db9fbbc1abdb4997e1094d3" name="libfreehand-doc" arch="noarch">
  <version epoch="0" ver="0.1.2" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.2-7" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.2-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.2-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ba80926e1b6f490e3f798328c211f2d1de71f2b15457f10d8ef4e08767915fae" name="libfreehand-tools" arch="aarch64">
  <version epoch="0" ver="0.1.2" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.2-7" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.2-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.2-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.2-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d585b4c10727c14cf6f7a3618372603cc0af738a6c86a1c460ba37e89794f52a" name="libgxps-tools" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tom Hughes &lt;tom@compton.nu&gt; - 0.3.2-1" date="1614340800">- Update to 0.3.2 upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2c6912e3506b5261be0b04db6c867ce7b19d92a4a1d3eefe420f2303763f8078" name="libhangul-devel" arch="aarch64">
  <version epoch="0" ver="0.1.0" rel="25.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-21" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-22" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.0-23" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.0-24" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.0-25" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ff71873a501d0036c598da3255a25453f5cb9db5458fc8a356259ec646d75cda" name="libhwasan" arch="aarch64">
  <version epoch="0" ver="15.2.1" rel="7.1.el9_8"/>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 14.2.1-7.2" date="1747051200">- Fix GTS version in package name.</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-1" date="1747656000">- update from releases/gcc-15 branch
  - GCC 15.1 release
  - PRs fortran/119836, target/119327, target/119873, tree-optimization/118407</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2" date="1747828800">- update from releases/gcc-15 branch
  - PRs ada/112958, ada/120104, c/120057, c++/119863, c++/119864, c++/119938,
   c++/119939, c++/119981, c++/119996, c++/120012, c++/120013,
   c++/120023, c++/120125, c++/120161, c++/120350, fortran/102891,
   fortran/102900, fortran/119928, fortran/119986, fortran/120049,
   fortran/120107, fortran/120139, fortran/120163, fortran/120179,
   fortran/120191, ipa/119852, ipa/119973, ipa/120006, ipa/120146,
   libfortran/120152, libfortran/120153, libfortran/120158,
   libfortran/120196, libstdc++/118260, libstdc++/119427,
   libstdc++/119714, libstdc++/120029, libstdc++/120114,
   libstdc++/120159, libstdc++/120187, libstdc++/120190,
   libstdc++/120198, libstdc++/120293, modula2/115276, modula2/119914,
   modula2/119915, modula2/120117, modula2/120188, preprocessor/116047,
   preprocessor/120061, target/119610, testsuite/119909,
   tree-optimization/111873, tree-optimization/119712,
   tree-optimization/120043, tree-optimization/120048,
   tree-optimization/120074, tree-optimization/120089,
   tree-optimization/120143, tree-optimization/120211</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.1" date="1749038400">- re-enable annobin-plugin and offload-nvptx</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.2" date="1749211200">- configure with --enable-host-pie --enable-host-bind-now (RHEL-95564)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.3" date="1749729600">- Add AS_NEEDED libstdc++.so.6 when only needed through libstdc++_nonshared
  (RHEL-94866)</changelog>
  <changelog author="Marek Polacek &lt;polacek@redhat.com&gt; 15.1.1-2.4" date="1750075200">- ship libstdc++.modules.json (RHEL-97095)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.1.1-2.5" date="1757419200">- Fix glibc32 build dependency (RHEL-113182)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7" date="1769428800">- update from releases/gcc-15 branch (RHEL-116513)
  - PRs ada/68179, ada/123060, ada/123088, ada/123096, ada/123138, ada/123185,
	ada/123289, ada/123302, ada/123306, ada/123371, ada/123589,
	analyzer/122975, analyzer/123085, c/123156, c++/91388, c++/114764,
	c++/116952, c++/120446, c++/121854, c++/121966, c++/122048,
	c++/122070, c++/122550, c++/122668, c++/122752, c++/122772,
	c++/122834, c++/122922, c++/123331, c++/123597, debug/121964,
	diagnostics/120063, fortran/107406, libfortran/122936,
	libstdc++/120446, libstdc++/122812, libstdc++/122907,
	libstdc++/123147, middle-end/111817, middle-end/123107,
	middle-end/123392, middle-end/123703, rtl-optimization/121773,
	rtl-optimization/122215, rtl-optimization/123121,
	rtl-optimization/123523, target/117575, target/119130,
	target/120250, target/121192, target/121485, target/123022,
	target/123092, target/123155, target/123217, target/123460,
	target/123484, target/123489, target/123521, target/123607,
	target/123742, testsuite/123353, tree-optimization/122793,
	tree-optimization/122868, tree-optimization/123040,
	tree-optimization/123300, tree-optimization/123351,
	tree-optimization/123372, tree-optimization/123431,
	tree-optimization/123513, tree-optimization/123602,
	tree-optimization/123736, tree-optimization/123741</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 15.2.1-7.1" date="1772712000">- Always inline _M_extract_name (RHEL-150603)</changelog>
</package>
<package pkgid="62afb9dbe7d0ea1a695930b8ef27ebec8efc4791d31f8ce7a6e6c658c934f182" name="libical-glib-doc" arch="noarch">
  <version epoch="0" ver="3.0.14" rel="1.el9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.8-5" date="1596542400">- Use CMake macros for the build
- Change how python tests are invoked (RH bug #1865924)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.9-1" date="1610971200">- Update to 3.0.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.9-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.9-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.10-1" date="1619438400">- Resolves: #1953449 (Update to 3.0.10)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.10-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.11-1" date="1634558400">- Resolves: #2014989 (Update to 3.0.11)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.12-1" date="1639396800">- Resolves: #2031657 (Update to 3.0.12)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.13-1" date="1642507200">- Resolves: #2041724 (Update to 3.0.13)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 3.0.14-1" date="1644840000">- Resolves: #2054087 (Update to 3.0.14)</changelog>
</package>
<package pkgid="cdb1bd2dafb18a3f79ce67c2a3bf9ec0e64bf65651ee8c19a8a09a346b353f4c" name="libicu-doc" arch="noarch">
  <version epoch="0" ver="67.1" rel="10.el9_6"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 67.1-10" date="1751976000">- ICU-22973 Fix buffer overflow by using CharString
  Resolves: RHEL-96664</changelog>
</package>
<package pkgid="56ce67a51649b55f8ee06217209c9fe72f40de286763f8c5033c1f70e27d73da" name="libijs-devel" arch="aarch64">
  <version epoch="0" ver="0.35" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-11" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-12" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.35-14" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.35-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="db6b30ede8a013cc506ad8b3a0f6e0280233aff6004c1dde7745af2b9303db27" name="libijs-doc" arch="noarch">
  <version epoch="0" ver="0.35" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-11" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-12" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.35-14" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.35-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="78de5342303dbc35a643fc4dc7a03e2d57eae9a328fe1db063b935a4b7bc65c3" name="libinput-test" arch="aarch64">
  <version epoch="0" ver="1.19.3" rel="8.el9_7"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.19.3-5" date="1740398400">- Add quirks for four more dell touchpads (RHEL-69798)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.19.3-6" date="1753444800">- Add support for the Wacom Intuos Pro (RHEL-105483)
- Rename existing patches for better order clarity</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.19.3-7" date="1754308800">- Fix crash when the Wacom Intuos Pro 3rd gen sends absolute wheel events</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.19.3-8" date="1770724800">- Handle BTN_STYLUS3 (RHEL-147703)</changelog>
</package>
<package pkgid="1d61cfd303399f33389c2b769980a0f6c1b2404c609b9d3babd6c760ae48d830" name="libipa_hbac-devel" arch="aarch64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="51255e13809f918d8d01336ecebca57b33bd56538b00ea5b9a4cba4c42a3fc3e" name="libipa_hbac-devel" arch="aarch64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="1eaa7129f8e3dbb96ce2cd87c273a6dccef202e6978e4fb8db0fc6963bc2434b" name="libitm-static" arch="aarch64">
  <version epoch="0" ver="11.5.0" rel="14.el9.alma.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 11.5.0-14.alma.1" date="1774872000">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="393a156de3a6f1a7af041d26de342d57f3fcc751fd65ff558e7fbd557536ee31" name="libjcat-tests" arch="aarch64">
  <version epoch="0" ver="0.1.6" rel="3.el9"/>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.2-2" date="1591358400">- Fix for CVE-2020-10759</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.3-1" date="1592308800">- New upstream release
- Export the JcatBlobKind and JcatBlobMethod on the result</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-3" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.4-1" date="1603454400">- New upstream release
- Export the old JCatEngine property to preserve internal ABI</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.5-1" date="1610107200">- New upstream release
- Allow verifying expired certificates with an additional argument</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.5-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard Hughes &lt;richard@hughsie.com&gt; 0.1.6-1" date="1612785600">- New upstream release
- Fall back to the AliasId for validation
- Fix jcat_context_verify_blob() to use self verify for checksums</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.6-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.6-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0ee7c5760ca89496bfc81251192280e8997d5db6cb36db1476a294f48a929f69" name="libkcapi-devel" arch="aarch64">
  <version epoch="0" ver="1.4.0" rel="2.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-1" date="1698840000">- Update to new upstream release 1.4.0
  Resolves: RHEL-5367
- Add a patch to fix auxiliary tests in FIPS mode
  Resolves: RHEL-2405
- Add a patch to zeroize kcapi-hasher for FIPS 140-3
  Resolves: RHEL-15112
- Add a patch to allow overriding target file in kcapi-hasher
  Resolves: RHEL-15298</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-2" date="1701432000">- Backport fixes for kcapi-hasher target option
  Related: RHEL-15298
- Fix kcapi tests in FIPS mode
  Resolves: RHEL-2405</changelog>
</package>
<package pkgid="5501af7d1839bfc67c265105bd9bee04464f5426f88d3040664cc36a1a2f6cf9" name="libkcapi-doc" arch="noarch">
  <version epoch="0" ver="1.4.0" rel="2.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-1" date="1698840000">- Update to new upstream release 1.4.0
  Resolves: RHEL-5367
- Add a patch to fix auxiliary tests in FIPS mode
  Resolves: RHEL-2405
- Add a patch to zeroize kcapi-hasher for FIPS 140-3
  Resolves: RHEL-15112
- Add a patch to allow overriding target file in kcapi-hasher
  Resolves: RHEL-15298</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-2" date="1701432000">- Backport fixes for kcapi-hasher target option
  Related: RHEL-15298
- Fix kcapi tests in FIPS mode
  Resolves: RHEL-2405</changelog>
</package>
<package pkgid="f1b83ae848bab4f0c10fcebf05e030ee33256ad3c68c7a0561e40a6a94686c9c" name="libkcapi-fipscheck" arch="aarch64">
  <version epoch="0" ver="1.4.0" rel="2.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-1" date="1698840000">- Update to new upstream release 1.4.0
  Resolves: RHEL-5367
- Add a patch to fix auxiliary tests in FIPS mode
  Resolves: RHEL-2405
- Add a patch to zeroize kcapi-hasher for FIPS 140-3
  Resolves: RHEL-15112
- Add a patch to allow overriding target file in kcapi-hasher
  Resolves: RHEL-15298</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-2" date="1701432000">- Backport fixes for kcapi-hasher target option
  Related: RHEL-15298
- Fix kcapi tests in FIPS mode
  Resolves: RHEL-2405</changelog>
</package>
<package pkgid="875d8b7509e45000cefd707cf054e7c560dbaec47dbf518f10dc3484799f0088" name="libkcapi-static" arch="aarch64">
  <version epoch="0" ver="1.4.0" rel="2.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-1" date="1698840000">- Update to new upstream release 1.4.0
  Resolves: RHEL-5367
- Add a patch to fix auxiliary tests in FIPS mode
  Resolves: RHEL-2405
- Add a patch to zeroize kcapi-hasher for FIPS 140-3
  Resolves: RHEL-15112
- Add a patch to allow overriding target file in kcapi-hasher
  Resolves: RHEL-15298</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-2" date="1701432000">- Backport fixes for kcapi-hasher target option
  Related: RHEL-15298
- Fix kcapi tests in FIPS mode
  Resolves: RHEL-2405</changelog>
</package>
<package pkgid="9a70b21e6cdc9fa449d8839e6ff629761027dd8f1691587f9827ac197b654d0f" name="libkcapi-tests" arch="aarch64">
  <version epoch="0" ver="1.4.0" rel="2.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-1" date="1698840000">- Update to new upstream release 1.4.0
  Resolves: RHEL-5367
- Add a patch to fix auxiliary tests in FIPS mode
  Resolves: RHEL-2405
- Add a patch to zeroize kcapi-hasher for FIPS 140-3
  Resolves: RHEL-15112
- Add a patch to allow overriding target file in kcapi-hasher
  Resolves: RHEL-15298</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-2" date="1701432000">- Backport fixes for kcapi-hasher target option
  Related: RHEL-15298
- Fix kcapi tests in FIPS mode
  Resolves: RHEL-2405</changelog>
</package>
<package pkgid="491dda2fb1897338e457c682e371e6af3c711ef2e214c0db96492b9bb023ecf9" name="libkcapi-tools" arch="aarch64">
  <version epoch="0" ver="1.4.0" rel="2.el9"/>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-1" date="1698840000">- Update to new upstream release 1.4.0
  Resolves: RHEL-5367
- Add a patch to fix auxiliary tests in FIPS mode
  Resolves: RHEL-2405
- Add a patch to zeroize kcapi-hasher for FIPS 140-3
  Resolves: RHEL-15112
- Add a patch to allow overriding target file in kcapi-hasher
  Resolves: RHEL-15298</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 1.4.0-2" date="1701432000">- Backport fixes for kcapi-hasher target option
  Related: RHEL-15298
- Fix kcapi tests in FIPS mode
  Resolves: RHEL-2405</changelog>
</package>
<package pkgid="da136eaaf9d8bcbfef38f8477d47ffa5a81ec840682c73299adb9e9fc999c85f" name="libkdumpfile-doc" arch="noarch">
  <version epoch="0" ver="0.5.5" rel="1.el9"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.5.1-3" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michel Alexandre Salim &lt;salimma@fedoraproject.org&gt; - 0.5.2-1" date="1690372800">- Update to 0.5.2
- Use SPDX license identifiers
- Fix documentation build to be properly be noarch</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.2-3" date="1714737600">- Add gating.yaml to RHEL9 libkdumpfile</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 0.5.2-4" date="1715774400">- Add tests/ directory</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.4-1" date="1731412800">- Rebase to upstream v0.5.4
  Resolves: RHEL-67143</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.5-1" date="1747396800">- Rebase to upstream v0.5.5
  Resolves: RHEL-86262</changelog>
</package>
<package pkgid="2e401b2f2d97df5865f7933976575c9b2d74328b9969951a327ed115bf156abc" name="libkdumpfile-util" arch="aarch64">
  <version epoch="0" ver="0.5.5" rel="1.el9"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.5.1-3" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michel Alexandre Salim &lt;salimma@fedoraproject.org&gt; - 0.5.2-1" date="1690372800">- Update to 0.5.2
- Use SPDX license identifiers
- Fix documentation build to be properly be noarch</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.2-3" date="1714737600">- Add gating.yaml to RHEL9 libkdumpfile</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 0.5.2-4" date="1715774400">- Add tests/ directory</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.4-1" date="1731412800">- Rebase to upstream v0.5.4
  Resolves: RHEL-67143</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.5-1" date="1747396800">- Rebase to upstream v0.5.5
  Resolves: RHEL-86262</changelog>
</package>
<package pkgid="ad76f8217acf5d7ad7edea664646af406f845068846517f9da802831db6dd22b" name="liblayout" arch="noarch">
  <version epoch="0" ver="0.2.10" rel="25.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.10-20" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0.2.10-21" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.10-22" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.10-23" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.10-24" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951286 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.10-25" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9e77cd9d9a8b7629616e61aeb21b30c09531ea900f2c23086fc35830858858e5" name="liblayout-javadoc" arch="noarch">
  <version epoch="0" ver="0.2.10" rel="25.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.10-20" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0.2.10-21" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.10-22" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.2.10-23" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.10-24" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951286 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.2.10-25" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fefe270048977dacb2bc9b524a4fb160f6754832f0570788953fefee5d65b24a" name="libldac-devel" arch="aarch64">
  <version epoch="0" ver="2.0.2.3" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2.3-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2.3-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Gergely Gombos &lt;gombosg@disroot.org&gt; - 2.0.2.3-7" date="1596024000">- Fix cmake out-of-source FTBFS for F33/rawhide</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2.3-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.2.3-9" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.2.3-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="561a654db7b9186a9a06948eaa0ee3bdfb57dfa8a177e7aee01dece5114e9deb" name="libloader" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="32.el9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-23" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-24" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-25" date="1594987200">- Resolves: rhbz#1858035 disable failing javadoc parts</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-26" date="1594987201">- Related: rhbz#1858035 build in side-tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-27" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.3-28" date="1610712000">- Remove ant-contrib support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-29" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-30" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951284 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-31" date="1619524800">- Remove ant-contrib support dropped compile.res_copy target so
  .properties files didn't get included in the jar so libloader
  didn't use its built-in loaders so libreoffice's database
  report generator didn't work</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-32" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="dd06b066f9333bae08d424e8baee08e6698b3390c25c668a03e119f8e39e732f" name="libloader-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="32.el9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-23" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-24" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-25" date="1594987200">- Resolves: rhbz#1858035 disable failing javadoc parts</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-26" date="1594987201">- Related: rhbz#1858035 build in side-tag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-27" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.3-28" date="1610712000">- Remove ant-contrib support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-29" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-30" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951284 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-31" date="1619524800">- Remove ant-contrib support dropped compile.res_copy target so
  .properties files didn't get included in the jar so libloader
  didn't use its built-in loaders so libreoffice's database
  report generator didn't work</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-32" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9c9c84f53cc4e8bacd409de85b57732e60daada02a77c1181f711e7ca4bcc67c" name="liblognorm-utils" arch="aarch64">
  <version epoch="0" ver="2.0.6" rel="5.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-3" date="1628251200">- Add skipempty to liblognorm json type
  resolves: rhbz#1990737</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.6-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 2.0.6-5" date="1690977600">- Rebuild
  resolves: rhbz#2227729</changelog>
</package>
<package pkgid="78cf80f9399eb95abfa2b69427891b7bde62d03094640c14d7ec0ce6de507ffb" name="liblouis-devel" arch="aarch64">
  <version epoch="0" ver="3.16.1" rel="5.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.16.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.16.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.16.1-5" date="1680523200">- Fix CVE-2023-26767 (#2181147)
- Fix CVE-2023-26768 (#2181151)
- Fix CVE-2023-26769 (#2181149)</changelog>
</package>
<package pkgid="c960fc6e0d0f37dd6f9c96980033ee4b8879915a37e685ae54d305900d37951d" name="liblouis-doc" arch="noarch">
  <version epoch="0" ver="3.16.1" rel="5.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.16.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.16.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.16.1-5" date="1680523200">- Fix CVE-2023-26767 (#2181147)
- Fix CVE-2023-26768 (#2181151)
- Fix CVE-2023-26769 (#2181149)</changelog>
</package>
<package pkgid="7d22b3efe2341fa26fe57cd3e4976cfe18976090075842416110bb4068e8e1e7" name="liblouis-utils" arch="aarch64">
  <version epoch="0" ver="3.16.1" rel="5.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.16.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.16.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 3.16.1-5" date="1680523200">- Fix CVE-2023-26767 (#2181147)
- Fix CVE-2023-26768 (#2181151)
- Fix CVE-2023-26769 (#2181149)</changelog>
</package>
<package pkgid="ecb45d0d7d4711bbd3446a673189eac4eeab208b515ac4edd19181915d9c219e" name="liblsan-static" arch="aarch64">
  <version epoch="0" ver="11.5.0" rel="14.el9.alma.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 11.5.0-14.alma.1" date="1774872000">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="7a37deee86b6f8b1f84dc37ab4abba40e899020d42fda25aef39b5a7a06258c5" name="libmatchbox-devel" arch="aarch64">
  <version epoch="0" ver="1.9" rel="30.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-26" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-27" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-28" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3ea524222c2509d9726a31c67430990ffb156245fbd0dc7f388da7f04be7a6b7" name="libmbim-devel" arch="aarch64">
  <version epoch="0" ver="1.32.0" rel="1.el9"/>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.30.0-1" date="1741262400">- Update to 1.30.0</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.32.0-1" date="1755086400">- Update to 1.32 (RHEL-101709)</changelog>
</package>
<package pkgid="d6c0d6e00cf241322e4419b2af4fe06d78af56cac1fb14cbadd0267ad50b0999" name="libmediaart" arch="aarch64">
  <version epoch="0" ver="1.9.5" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.4-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.9.5-1" date="1624276800">+ libmediaart-1.9.5-1
- Update to 1.9.5 from Fedora 34
- Resolves: rhbz#1965886</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.5-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d368ab2382689e52a77b32489ebedd05d92d158ca9d2dbc5825f38d7061418de" name="libmediaart-devel" arch="aarch64">
  <version epoch="0" ver="1.9.5" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.4-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.4-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 1.9.5-1" date="1624276800">+ libmediaart-1.9.5-1
- Update to 1.9.5 from Fedora 34
- Resolves: rhbz#1965886</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.5-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="de2be81dfd678b3ed0bb27f3d5db6fcf2766d0b87891a46cffaa827ca95fe84c" name="libmnl-static" arch="aarch64">
  <version epoch="0" ver="1.0.4" rel="16.el9_4"/>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.4-16" date="1715256000">- libmnl: zero attribute padding</changelog>
</package>
<package pkgid="4ed37dc96507e5d381b7c6524bade6c25667de7e7f6202365f0a2951bab72caf" name="libmpc-doc" arch="noarch">
  <version epoch="0" ver="1.2.1" rel="4.el9"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.1.0-5" date="1570536000">- Make mpfr3 and mpfr3-devel subpackages
- Drop the compat-libmpc package; nothing in Fedora needs it
- Update project URL
- Add a -doc subpackage to hold the GFDL-licensed content
- Drop unnecessary texinfo BR
- Drop ldconfig_scriptlets; this version cannot appear in distros that need it
- Make sure there are no rpaths and that -Wl,--as-needed takes effect</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.1.0-6" date="1570622400">- Build the main package against mpfr4</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.1.0-7" date="1570795200">- Drop the libmpc-mpfr3 and libmpc-mpfr3-devel subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 1.2.1-1" date="1605268800">- Upgrade to libmpc version 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6f02578efe9802fdd229ca3a43eea5b2ee868866849ad4085a71b8403fe4136c" name="libmsi1" arch="aarch64">
  <version epoch="0" ver="0.101.85" rel="5.el9"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.100-7" date="1601812800">- Fix FTBFS. rhbz#1864178
- Drop mingw-gstreamer* checks, it's outdated.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.100-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101-1" date="1612267200">- new version v0.101
- Fix FTBFS. rhbz#1923683</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 0.101-2" date="1612353600">- Fix enablement of wxi tests
- Use perl-base and gettext for more minimal dep chain</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101.27-1" date="1624881600">- Fix FTBFS. rhbz#1943037</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101.27-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101.32-1" date="1627819200">- Fix FTBFS. rhbz#1987721</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101.32-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101.32-3" date="1643457600">- Fix FTBFS. rhbz#2046759</changelog>
  <changelog author="Yan Vugenfirer &lt;yvugenfi@redhat.com&gt; - 0.101.85-4" date="1645617600">- Add gating and fix gating errors. rhbz#2047292</changelog>
</package>
<package pkgid="f8218ba8fbd2cd48913a2084ff22041db18783babd6905d417ffaf7b36a8b1ea" name="libmsi1-devel" arch="aarch64">
  <version epoch="0" ver="0.101.85" rel="5.el9"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.100-7" date="1601812800">- Fix FTBFS. rhbz#1864178
- Drop mingw-gstreamer* checks, it's outdated.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.100-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101-1" date="1612267200">- new version v0.101
- Fix FTBFS. rhbz#1923683</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 0.101-2" date="1612353600">- Fix enablement of wxi tests
- Use perl-base and gettext for more minimal dep chain</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101.27-1" date="1624881600">- Fix FTBFS. rhbz#1943037</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101.27-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101.32-1" date="1627819200">- Fix FTBFS. rhbz#1987721</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101.32-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101.32-3" date="1643457600">- Fix FTBFS. rhbz#2046759</changelog>
  <changelog author="Yan Vugenfirer &lt;yvugenfi@redhat.com&gt; - 0.101.85-4" date="1645617600">- Add gating and fix gating errors. rhbz#2047292</changelog>
</package>
<package pkgid="03deb80d1971d019f77189395bbc886c8e0ae8527e188dcf802585d607da2c86" name="libmspub-doc" arch="noarch">
  <version epoch="0" ver="0.1.4" rel="17.el9"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.4-9" date="1572609600">- Rebuild for ICU 65</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.1.4-10" date="1576324800">- Fix missing #include for gcc-10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.4-11" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.4-12" date="1589630400">- Rebuild for ICU 67</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.4-13" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.4-14" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.4-15" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.4-16" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.4-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cd96a42a9e87f8666fdd80cfa4b2f164fbb534e32de751309a269244e056159c" name="libmspub-tools" arch="aarch64">
  <version epoch="0" ver="0.1.4" rel="17.el9"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.4-9" date="1572609600">- Rebuild for ICU 65</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.1.4-10" date="1576324800">- Fix missing #include for gcc-10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.4-11" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.4-12" date="1589630400">- Rebuild for ICU 67</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.4-13" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.4-14" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.4-15" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.4-16" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.4-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="59340ccf424f27dab4753d6b2990440aae3686a044bd35be2440c38ebb843a2f" name="libmtp-examples" arch="aarch64">
  <version epoch="0" ver="1.1.18" rel="7.el9"/>
  <changelog author="Ondrej Holy &lt;oholy@redhat.com&gt; - 1.1.18-7" date="1768305600">- Disable player match that breaks Bluetooth on Mediatek MT7925 adapters (RHEL-140110)</changelog>
</package>
<package pkgid="3bf162d986bf600b51a42299aaafa3416433915aeeeb4e38731cb774ded6394f" name="libmwaw-devel" arch="aarch64">
  <version epoch="0" ver="0.3.21" rel="1.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.3.16-2" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.16-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.17-1" date="1600689600">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.17-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.17-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.18-1" date="1620388800">- new upstream release</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.19-1" date="1620648000">- new upstream release</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.20-1" date="1627300800">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.20-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.3.21-1" date="1639483200">- rhbz#2031658 merge in fedora 34 changes</changelog>
</package>
<package pkgid="25f4150ec54b0fd88d30679626325cf1a96b0bae010357977c2046ee55445d61" name="libmwaw-doc" arch="noarch">
  <version epoch="0" ver="0.3.21" rel="1.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.3.16-2" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.16-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.17-1" date="1600689600">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.17-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.17-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.18-1" date="1620388800">- new upstream release</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.19-1" date="1620648000">- new upstream release</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.20-1" date="1627300800">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.20-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.3.21-1" date="1639483200">- rhbz#2031658 merge in fedora 34 changes</changelog>
</package>
<package pkgid="d602005bbc7146d90d223e2455fabd0ab0e8467e803d3bcaca862015195d1f2c" name="libmwaw-tools" arch="aarch64">
  <version epoch="0" ver="0.3.21" rel="1.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.3.16-2" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.16-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.17-1" date="1600689600">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.17-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.17-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.18-1" date="1620388800">- new upstream release</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.19-1" date="1620648000">- new upstream release</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.3.20-1" date="1627300800">- new upstream release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.20-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.3.21-1" date="1639483200">- rhbz#2031658 merge in fedora 34 changes</changelog>
</package>
<package pkgid="2a7db527e6fffd56c7b8f01dc18b6e9289996e39e0f6367102d1c911a06ec08b" name="libmypaint-devel" arch="aarch64">
  <version epoch="0" ver="1.6.1" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Bj&#xF6;rn Esser &lt;besser82@fedoraproject.org&gt; - 1.6.1-4" date="1625918400">- Rebuild for versioned symbols in json-c</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-5" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.1-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.6.1-7" date="1644408000">- add gating.yaml file</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.6.1-8" date="1647432000">- add provides for fastapprox library #2064301</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.6.1-9" date="1660046400">- add provides for rng-double library #2064301</changelog>
</package>
<package pkgid="e1f72259719ccc16d9fc0da81d9ede48bd97a38ee4b2512ac10fed9b808b9dbe" name="libndp-devel" arch="aarch64">
  <version epoch="0" ver="1.9" rel="1.el9"/>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.8-5" date="1700049600">- Convert the license tag to SPDX format
  Related: RHELMISC-1363</changelog>
  <changelog author="Felix Maurer &lt;fmaurer@redhat.com&gt; - 1.9-1" date="1720612800">- Update to libndp 1.9</changelog>
</package>
<package pkgid="dc22e63ab10b5808c9ccfd833d951c7f6914edb7513f9f6ec9d77ed30e305ae2" name="libnet-doc" arch="noarch">
  <version epoch="0" ver="1.2" rel="7.el9"/>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 1.2-7" date="1709812800">- Apply upstream patch to fix 3 findings from static application security testing
  Resolves: RHEL-27656</changelog>
</package>
<package pkgid="956518ec1eabc397d9e22d39ff6ca704c0ec26c14b79d01a674a6b1868ae9f8e" name="libnetfilter_cthelper-devel" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="22.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-17" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-18" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-19" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0-20" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0-21" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Phil Sutter &lt;psutter@redhat.com&gt; - 1.0.0-22" date="1640174400">- src: fix incorrect building and parsing of the NFCTH_POLICY_SETX attribute
- examples: kill the "invalid argument" error in nftc-helper-add
- examples: fix double free in nftc-helper-add
- include: Sync with kernel headers
- src: fix use after free</changelog>
</package>
<package pkgid="0595486c089803945d584a33e265a0c7540efbff7f59d1ee2b8dc173260c8913" name="libnetfilter_cttimeout-devel" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="19.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-15" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-16" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-17" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0-19" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b75c1db1a9d4a5a50d5d21ab21f07fd270a352e2c8c6e47225e5374ef88b892e" name="libnl3-doc" arch="aarch64">
  <version epoch="0" ver="3.11.0" rel="1.el9"/>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.8.0-1" date="1701432000">- Update to 3.8.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.9.0-1" date="1701691200">- Update to 3.9.0 release (RHEL-17843)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 3.11.0-1" date="1731412800">- Update to 3.11.0 release (RHEL-67129)</changelog>
</package>
<package pkgid="bd8923a9e459b6eceb033f0ab2ce22ab6c6fb55e5d25369a9d10e4b45e5700bf" name="libnozzle1-devel" arch="aarch64">
  <version epoch="0" ver="1.28" rel="1.el9"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.24-1" date="1657886400">- Rebase to 1.24
  Resolves: rhbz#2024090</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.24-2" date="1657886401">- Fix libnozzle tests failing &amp; covscan warning on api_knet_handle_new test
  Resolves: rhbz#2024090</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.25-1" date="1674043200">Rebase to 1.25 for PMTUd fixes
  Resolves: rhbz#2161168</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; - 1.28-1" date="1696852800">Rebase to 1.28 for startup and performance fixes
   threads: add config check to match min value with pong timeouts
   rx: allow links to be active faster
   links: fix ping interval and pong timeout value checking
   crypto: Try crypt and decrypt on crypto_init
   tx: Remove expensive memsets
   log: Add a TRACE log level
  Resolves: #RHEL-11787</changelog>
</package>
<package pkgid="35569e05c06ee5f2dc25421a8dbed69c0843cd2148ae40c5d0b128eb7103e1ff" name="libnumbertext-devel" arch="aarch64">
  <version epoch="0" ver="1.0.6" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.0.5-5" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.0.6-1" date="1596888000">- latest version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.6-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.6-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.6-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="caea4b1689286cd042cb4aaf3ffded99aac31a07da6cf3c3f741d6d9ff4cff82" name="libnvme-doc" arch="noarch">
  <version epoch="0" ver="1.16.1" rel="3.el9_8"/>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-1" date="1715083200">- Rebase to version 1.9</changelog>
  <changelog author="Tomas Bzatek &lt;tbzatek@redhat.com&gt; - 1.9-2" date="1721822400">- Backport URI parser API</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.9-3" date="1722513600">- Backport fix for RHEL-49544</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.10-1" date="1728302400">- Update to latest upstream version RHEL-61573</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11-1" date="1731412800">- Update libnvme to version 1.11 (RHEL-67145)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.11.1-1" date="1732017600">- TLS Fixes (RHEL-53980)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.13-1" date="1745928000">- Update to version 1.13 (RHEL-88847)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-1" date="1763640000">- Rebase to version 1.16.1 (RHEL-114102)</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-2" date="1763726400">- Respin for RHEL-114102</changelog>
  <changelog author="Maurizio Lombardi &lt;mlombard@redhat.com&gt; - 1.16.1-3" date="1773230400">- Fix linked list corruption RHEL-146273</changelog>
</package>
<package pkgid="07a13ec4bf7b4febd511e09624e34afe079499a24144cb4b051f3ff5600ce21d" name="libodfgen-doc" arch="noarch">
  <version epoch="0" ver="0.1.8" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.7-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.7-7" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.7-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.7-9" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.8-1" date="1610641718">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.8-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.8-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.8-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b9349bcdf42746fd8935cf1979a720a90554d53241f0dc7014ad655ffd2e95be" name="libopenraw-pixbuf-loader" arch="aarch64">
  <version epoch="0" ver="0.1.3" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.3-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.3-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.3-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3c1672286eafde8f2d949c4e63da3b7b9c0072d7be3e4ba4f816b30c24fcc757" name="liborcus-devel" arch="aarch64">
  <version epoch="0" ver="0.16.1" rel="8.el9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.0-2" date="1601035200">- replace -DSIZEOF_VOID_P=4 with upstream solution</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.0-3" date="1601035201">- reenable make check</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.1-1" date="1601380800">- latest release</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.16.1-2" date="1603108800">- Fix missing headers for gcc-11</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.1-3" date="1606910400">- build without libixion under rhel</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.1-4" date="1607428800">- fix build without libixion under rhel</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.16.1-5" date="1611316800">- Rebuilt for Boost 1.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.1-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16.1-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16.1-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cfcd5b5ca094f13434327fe4afa57f46cc6080da1e438345af58081473cc585a" name="liborcus-doc" arch="noarch">
  <version epoch="0" ver="0.16.1" rel="8.el9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.0-2" date="1601035200">- replace -DSIZEOF_VOID_P=4 with upstream solution</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.0-3" date="1601035201">- reenable make check</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.1-1" date="1601380800">- latest release</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.16.1-2" date="1603108800">- Fix missing headers for gcc-11</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.1-3" date="1606910400">- build without libixion under rhel</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.1-4" date="1607428800">- fix build without libixion under rhel</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.16.1-5" date="1611316800">- Rebuilt for Boost 1.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.1-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16.1-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16.1-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a18f12c5e3f0f225d63fb6fb31e7dac892e0b7e9d2f9f7c1a76177d9ef95df88" name="liborcus-tools" arch="aarch64">
  <version epoch="0" ver="0.16.1" rel="8.el9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.0-2" date="1601035200">- replace -DSIZEOF_VOID_P=4 with upstream solution</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.0-3" date="1601035201">- reenable make check</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.1-1" date="1601380800">- latest release</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.16.1-2" date="1603108800">- Fix missing headers for gcc-11</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.1-3" date="1606910400">- build without libixion under rhel</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 0.16.1-4" date="1607428800">- fix build without libixion under rhel</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.16.1-5" date="1611316800">- Rebuilt for Boost 1.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.1-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16.1-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16.1-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="eeb9df8c8646a3192d7747139700a1aa3989d1d49ba6453d5c58b8a6458d9f76" name="libosinfo-devel" arch="aarch64">
  <version epoch="0" ver="1.10.0" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabiano Fid&#xEA;ncio &lt;fidencio@redhat.com&gt; - 1.9.0-1" date="1612267200">- Update to 1.9.0 release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 1.9.0-4" date="1638360000">- Improve error message on failure to access database due permission
  Related: rhbz#1942431</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 1.9.0-5" date="1644580800">- Warn on EACCES error when skipMissing is set
  Resolves: rhbz#2051559</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 1.10.0-1" date="1669809600">- Update to 1.10.0 release</changelog>
</package>
<package pkgid="1ee19c2d57930100118e7ef4b97ca5fd1af25e222caad38255123b4b46f6b264" name="libotf-devel" arch="aarch64">
  <version epoch="0" ver="0.9.13" rel="20.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.13-15" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.13-16" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.13-17" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.13-18" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.13-19" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.13-20" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="446aa25a10d84eaa62279c9e5021962eef5c5f1648a21b1cfed4f1996c8639f3" name="libpagemaker-doc" arch="noarch">
  <version epoch="0" ver="0.0.4" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.0.4-9" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.4-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.4-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0ad62ed8bd658e8a965cbcc3cb4f1201b1bf496002d6c73e6114a7e321c5c141" name="libpagemaker-tools" arch="aarch64">
  <version epoch="0" ver="0.0.4" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.0.4-9" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.4-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.4-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="dbbe09d3a9784edc41d4636ffff55a8c2e5c260befbc28fc9b992c447c7dd2d5" name="libpamtest" arch="aarch64">
  <version epoch="0" ver="1.1.4" rel="2.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.1.3-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.3-5" date="1596628800">- Build using new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-1" date="1650542400">- related: rhbz#2028819 - Update to version 1.1.4</changelog>
  <changelog author="Norbert Pocs &lt;npocs@redhat.com&gt; - 1.1.4-2" date="1651579200">- related: rhbz#2048653 - Add package to CRB</changelog>
</package>
<package pkgid="dc4c6613749d7abb0f1e395a165d7676073f0064372001ad891c6dd4a4958161" name="libpamtest-devel" arch="aarch64">
  <version epoch="0" ver="1.1.4" rel="2.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.1.3-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.3-5" date="1596628800">- Build using new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-1" date="1650542400">- related: rhbz#2028819 - Update to version 1.1.4</changelog>
  <changelog author="Norbert Pocs &lt;npocs@redhat.com&gt; - 1.1.4-2" date="1651579200">- related: rhbz#2048653 - Add package to CRB</changelog>
</package>
<package pkgid="3597a32333e2a1dfd43d20c9dd8d96651ea4ea03d3a2149e47e7b7bea677d738" name="libpamtest-doc" arch="aarch64">
  <version epoch="0" ver="1.1.4" rel="2.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.1.3-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.3-5" date="1596628800">- Build using new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-1" date="1650542400">- related: rhbz#2028819 - Update to version 1.1.4</changelog>
  <changelog author="Norbert Pocs &lt;npocs@redhat.com&gt; - 1.1.4-2" date="1651579200">- related: rhbz#2048653 - Add package to CRB</changelog>
</package>
<package pkgid="2ba6c631b3116c1dd2d52173e5c3beb364644ccbb20aa5746d6b6f0fb0ed471c" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.10.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.6.1.el9_8]" date="1776340800">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167017] {CVE-2026-31402}
- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159223] {CVE-2025-68741}
- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158988]
- ionic: fix persistent MAC address override on PF (Mohammad Heib) [RHEL-151378]
- RDMA/bnxt_re: convert timeouts to secs_to_jiffies() (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix return code of bnxt_re_configure_cc (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix missing error handling for tx_queue (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix incorrect display of inactivity_cp in debugfs output (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix the condition check while programming congestion control (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix buffer overflow in debugfs code (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Congestion control settings using debugfs hook (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Use macro instead of hard coded value (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support 2G message size (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Fix size of uverbs_copy_to() in BNXT_RE_METHOD_GET_TOGGLE_MEM (CKI Backport Bot) [RHEL-155966]
- RDMA/bnxt_re: Support extended stats for Thor2 VF (CKI Backport Bot) [RHEL-155966]
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Medha Mummigatti) [RHEL-155207]
- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154095]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (Davide Caratti) [RHEL-150444] {CVE-2025-39766}
- rtnetlink: Allocate vfinfo size for VF GUIDs when supported (Kamal Heib) [RHEL-145522] {CVE-2025-22075}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.7.1.el9_8]" date="1777032000">- KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE (Paolo Bonzini) [RHEL-153722] {CVE-2026-23401}
- powerpc/tools: drop `-o pipefail` in gcc check scripts (Jan Stancek) [RHEL-165125]
- libceph: reset sparse-read state in osd_fault() (CKI Backport Bot) [RHEL-169078] {CVE-2026-23136}
- libceph: replace overzealous BUG_ON in osdmap_apply_incremental() (CKI Backport Bot) [RHEL-169071] {CVE-2026-22990}
- libceph: prevent potential out-of-bounds reads in handle_auth_done() (CKI Backport Bot) [RHEL-169067] {CVE-2026-22984}
- libceph: make decode_pool() more resilient against corrupted osdmaps (CKI Backport Bot) [RHEL-169063] {CVE-2025-71116}
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-167742]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-167742]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-167742]
- drm/i915/dp: Fix panel replay when DSC is enabled (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Recompute all MST link CRTCs if DSC gets enabled on the link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Track DSC enabled status on the MST link (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp_mst: Reuse the DP-SST helper function to compute FEC config (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Export helper to determine if FEC on non-UHBR links is required (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dp: Ensure the FEC state stays disabled for UHBR links (Anusha Srivatsa) [RHEL-104822]
- drm/i915/dsc: Add helper to enable the DSC configuration for a CRTC (Anusha Srivatsa) [RHEL-104822]
- x86/boot: Handle relative CONFIG_EFI_SBAT_FILE file paths (Oleksii Baranov) [RHEL-157853]
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157235] {CVE-2026-23270}
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150404] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150404]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.8.1.el9_8]" date="1777896000">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [RHEL-172204]
- crypto: algif_aead - Fix minimum RX size check for decryption (Herbert Xu) [RHEL-172204]
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [RHEL-172204]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [RHEL-172204] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [RHEL-172204]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [RHEL-172204] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [RHEL-172204] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [RHEL-172204]</changelog>
  <changelog author="Patrick Talbert &lt;ptalbert@redhat.com&gt; [5.14.0-687.9.1.el9_8]" date="1778500800">- xfrm: esp: avoid in-place decrypt on shared skb frags (Sabrina Dubroca) [RHEL-174563] {CVE-2026-43284}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.10.1.el9_8]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: move skb_gro_receive_list from udp to core (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176064] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176454] {CVE-2026-46333}
- md/bitmap: fix GPF in write_page caused by resize race (Nigel Croxon) [RHEL-174091] {CVE-2026-43163}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174020] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171430] {CVE-2026-31607}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170759] {CVE-2026-31532}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.10.1" date="1780833600">- Recreate RHEL 5.14.0-687.10.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1100-1196)
- Drop 687.5.3/687.5.4 security-ahead patches now superseded by the RHEL
  backports (xfrm-esp, rxrpc, net-skbuff fragnesia, ptrace, crypto
  authencesn/algif)
- Keep the smb cifs.spnego ahead-fix (retained as 1197)
- RHEL changelog for 687.6.1..687.10.1 follows:</changelog>
</package>
<package pkgid="f8fd6a1d8a9efcb40c1ba23e596170d83801c2a7ffe5d078102c13497b3f0f73" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.12.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.11.1.el9_8]" date="1779192000">- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174750] {CVE-2026-43303}
- ice: fix infinite recursion in ice_cfg_tx_topo via ice_init_dev_hw (CKI Backport Bot) [RHEL-175441]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172821]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172821]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172821]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172821]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172821] {CVE-2026-31709}
- Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold (David Marlin) [RHEL-165063] {CVE-2026-31408}
- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174058] {CVE-2026-43158}
- redhat/configs: enable CONFIG_SCLP_OFB for s390x (Jan Polensky) [RHEL-172927]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172740] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172620] {CVE-2026-43027}
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Ramesh Chhetri) [RHEL-166859]
- ice: add dpll peer notification for paired SMA and U.FL pins (Petr Oros) [RHEL-171829]
- ice: fix missing dpll notifications for SW pins (Petr Oros) [RHEL-171829]
- dpll: export __dpll_pin_change_ntf() for use under dpll_lock (Petr Oros) [RHEL-171829]
- ice: fix SMA and U.FL pin state changes affecting paired pin (Petr Oros) [RHEL-162179]
- ice: fix missing SMA pin initialization in DPLL subsystem (Petr Oros) [RHEL-171832]
- ice: fix NULL pointer dereference in ice_reset_all_vfs() (Petr Oros) [RHEL-172257]
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164442]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164442]
- scsi: storvsc: Handle PERSISTENT_RESERVE_IN truncation for Hyper-V vFC (Vitaly Kuznetsov) [RHEL-171378]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171155] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171138] {CVE-2026-31684}
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-170960]
- ice: fix ice_ptp_read_tx_hwtstamp_status_eth56g (Petr Oros) [RHEL-170701]
- ice: fix ready bitmap check for non-E822 devices (Petr Oros) [RHEL-170701]
- ice: perform PHY soft reset for E825C ports at initialization (Petr Oros) [RHEL-170701]
- ice: fix timestamp interrupt configuration for E825C (Petr Oros) [RHEL-170701]
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150179]
- nbd: defer config unlock in nbd_genl_connect (Jeff Moyer) [RHEL-166950] {CVE-2025-68366}
- x86/mm: flush IOMMU before freeing kernel page table pages (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- iommu/sva: add kernel page table IOTLB flush notification (Jerry Snitselaar) [RHEL-167100] {CVE-2025-71089}
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166987] {CVE-2026-23455}
- crypto: asymmetric_keys - prevent overflow in asymmetric_key_generate_id (CKI Backport Bot) [RHEL-166927] {CVE-2025-68724}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169734] {CVE-2025-68183}
- i2c: i801: Revert "i2c: i801: replace acpi_lock with I2C bus lock" (David Arcari) [RHEL-155312]
- ice: fix PTP timestamping broken by SyncE code on E825C (Petr Oros) [RHEL-162182]
- ice: fix missing TX timestamps interrupts on E825 devices (CKI Backport Bot) [RHEL-162185]
- Revert "mm: pcp: increase pcp-&gt;free_count threshold to trigger free_high" (Luiz Capitulino) [RHEL-163464]
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160461] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.12.1.el9_8]" date="1779710400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169626]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174216] {CVE-2026-43190}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173848] {CVE-2026-43110}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172599] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172572] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-170914]
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163343] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163343] {CVE-2025-38653}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157470]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.12.1" date="1780833600">- Recreate RHEL 5.14.0-687.12.1 from CentOS Stream 9 and upstream stable
  backports (SOURCES/1198-1252)
- RHEL changelog for 687.11.1..687.12.1 follows:</changelog>
</package>
<package pkgid="162c40835e7a6694fba4e40e93b6e86d82d2306e8e665276e5d3ca25c3dc4b42" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.13.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.13.1.el9_8]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178944] {CVE-2026-46243}
- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176472]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176472]
- nvme: nvme-fc: Ensure -&gt;ioerr_work is cancelled in nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- nvme: nvme-fc: move tagset removal to nvme_fc_delete_ctrl() (Ewan D. Milne) [RHEL-171745]
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172510] {CVE-2026-31786}
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (Vladislav Dronov) [RHEL-172167]
- crypto: authenc - Fix sleep in atomic context in decrypt_tail (Vladislav Dronov) [RHEL-172167]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171471] {CVE-2026-31613}
- mm/page_alloc: add vm.thp_thisnode_reclaim sysctl to allow THP reclaim on local node (Nico Pache) [RHEL-164778]
- mm/page_alloc: simplify __alloc_pages_slowpath() flow (Nico Pache) [RHEL-164778]
- mm/page_alloc: refactor the initial compaction handling (Nico Pache) [RHEL-164778]
- mm/page_alloc: ignore the exact initial compaction result (Nico Pache) [RHEL-164778]
- mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations (Nico Pache) [RHEL-164778]
- mm/page_alloc.c: avoid infinite retries caused by cpuset race (Nico Pache) [RHEL-164778]
- mm: warn about illegal __GFP_NOFAIL usage in a more appropriate location and manner (Nico Pache) [RHEL-164778]
- mm: document __GFP_NOFAIL must be blockable (Nico Pache) [RHEL-164778]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.13.1" date="1781179200">- Recreate RHEL 5.14.0-687.13.1 from CentOS Stream 9 and upstream stable backports (1253-1269)
- RHEL changelog for 687.13.1 follows:</changelog>
</package>
<package pkgid="cc7e1d79464eed1632659cce536a555ba591c4734c06a67635a3dce5c327d118" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.15.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
</package>
<package pkgid="b19e50c5393c4a82dad6ff27d6630512d2bb4f78db765ea762f2ee5d123a3e2a" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.17.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
</package>
<package pkgid="71ca07387ef4efdadace34213caa8f8fb883ad5b528c4827d914db9291a6deea" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.19.1.el9_8"/>
  <changelog author="Tanishi Srivastava &lt;tsrivast@redhat.com&gt; [5.14.0-687.14.1.el9_8]" date="1781006400">- RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() (Kamal Heib) [RHEL-179988] {CVE-2026-46181}
- redhat: Remove the mlx5 symbols from kabi (Kamal Heib) [RHEL-181822]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178408] {CVE-2026-43501}
- RDMA/rxe: Fix double free in rxe_srq_from_init (CKI Backport Bot) [RHEL-179712] {CVE-2026-45852}
- netfilter: ctnetlink: ensure safe access to master conntrack (Florian Westphal) [RHEL-173843] {CVE-2026-43116}
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177526]
- ice: set max queues in alloc_etherdev_mqs() (Michal Schmidt) [RHEL-174336]
- ice: use netif_get_num_default_rss_queues() (Michal Schmidt) [RHEL-174336]
- ice: set default rss queues num to physical cores / 2 (Michal Schmidt) [RHEL-174336]
- dlm: fix buffer overflow from negative len in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dlm: validate length in dlm_search_rsb_tree (Alexander Aring) [RHEL-173993] {CVE-2026-43125}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167273]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167833]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167833]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172938]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172938]
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172969] {CVE-2026-31581}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172768] {CVE-2026-43056}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count() (CKI Backport Bot) [RHEL-165564] {CVE-2026-23216}
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168068] {CVE-2026-31419}
- x86/kvm: Avoid freeing stack-allocated node in kvm_async_pf_queue_task (Ryosuke Yasuoka) [RHEL-158916]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.15.1.el9_8]" date="1781092800">- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172646] {CVE-2026-43037}
- net: openvswitch: Avoid releasing netdev before teardown completes (CKI Backport Bot) [RHEL-170539] {CVE-2026-31508}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
</package>
<package pkgid="10a282b7a72418187efda194be98ecd95bbd15a486bbde615de33aed24518506" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.20.1.el9_8"/>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.15.1" date="1781179200">- Recreate RHEL 5.14.0-687.15.1 from CentOS Stream 9 and upstream stable backports (1270-1284)
- redhat: Remove the mlx5 symbols from kabi: applied via updated Module.kabi_{aarch64,s390x,x86_64} (RHEL-181822)
- dpll/zl3073x and ice RSS-queue series consolidated (include RHEL kABI / RHEL-only files)
- RHEL changelog for 687.14.1..687.15.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.16.1.el9_8]" date="1781611200">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183317]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-178308]
- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Jan Polensky) [RHEL-166048]
- gfs2: Fix use-after-free in iomap inline data write path (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- gfs2: Add metapath_dibh helper (Andrew Price) [RHEL-179589] {CVE-2026-45984}
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180308] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180121] {CVE-2026-46125}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180085] {CVE-2026-46145}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180057] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180025] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179359] {CVE-2026-46056}
- ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues (CKI Backport Bot) [RHEL-175699]
- mptcp: fix slab-use-after-free in __inet_lookup_established (Davide Caratti) [RHEL-171506] {CVE-2026-31669}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175823]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175823]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175820]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175820]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175525] {CVE-2026-31474}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172858] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172488] {CVE-2026-31787}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.17.1.el9_8]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177392] {CVE-2026-46331}
- gitlab-ci: use rhel9.8 builder image (Michael Krausch-Hofmann)
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183130]
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179754] {CVE-2026-43414}
- nvmet-tcp: fix race between ICReq handling and queue teardown (Chris Leech) [RHEL-180102] {CVE-2026-46135}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180158] {CVE-2026-46117}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180016] {CVE-2026-46173}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173941] {CVE-2026-43279}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782129600">- Recreate RHEL 5.14.0-687.17.1 from CentOS Stream 9 and upstream stable backports (1285-1311)
- RHEL changelog for 687.16.1..687.17.1 follows:</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.17.1" date="1782216000">- Add fix for CVE-2026-46316 (KVM arm64 vgic-its translation-cache use-after-free) ahead of RHEL (1312)</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.18.1.el9_8]" date="1782216001">- net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix HCA caps leak on notifier init failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix crash when moving to switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix peer miss rules host disabled checks (Kamal Heib) [RHEL-169057]
- net/mlx5: qos: Restrict RTNL area to avoid a lock cycle (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header formulas for higher MTUs and 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix skb size check for 64K pages (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Fix header mapping for 64K pages (Kamal Heib) [RHEL-169057]
- IB/mlx5: Reduce IMR KSM size when 5-level paging is enabled (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other eswitch support to userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor _get_prio() function (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add other_eswitch support for devx destruction (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Change default device for LAG slaves in RDMA TRANSPORT namespaces (Kamal Heib) [RHEL-169057]
- net/mlx5e: Skip ESN replay window setup for IPsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix vhca_id access call trace use before alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Account for netdev stats in ndo_get_stats64 (Kamal Heib) [RHEL-169057]
- net/mlx5e: TC, delete flows only for existing peers (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix Unbinding uplink-netdev in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Restore destroying state bit after profile cleanup (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass netdev to mlx5e_destroy_netdev instead of priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't store mlx5e_priv in mlx5e_dev devlink priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix crash on profile change rollback failure (Kamal Heib) [RHEL-169057]
- net/mlx5e: Don't print error message due to invalid module (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, multipath, give priority for routes with smaller network prefix (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not update BQL of old txqs during channel reconfiguration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trigger neighbor resolution for unresolved destinations (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init (Kamal Heib) [RHEL-169057]
- net/mlx5: Serialize firmware reset with devlink (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Handle escaped percent properly (Kamal Heib) [RHEL-169057]
- net/mlx5: fw_tracer, Validate format string parameters (Kamal Heib) [RHEL-169057]
- net/mlx5: Drain firmware reset in shutdown callback (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, clear reset requested on drain_fw_reset (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix double unregister of HCA_PORTS component (Kamal Heib) [RHEL-169057]
- net/mlx5: make enable_mpesw idempotent (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support XDP target xmit with dummy program (Kamal Heib) [RHEL-169057]
- net/mlx5e: Update XDP features in switch channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use standard unit definitions for bandwidth conversion (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use U8_MAX instead of hard coded magic number (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename upper_limit_mbps to upper_limit_100mbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use u64 instead of __u64 in ieee_setmaxrate (Kamal Heib) [RHEL-169057]
- net/mlx5: Move SF dev table notifier registration outside the PF devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF table notifiers outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the SF HW table notifier outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the vhca event notifier outside of the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Move the esw mode notifier chain outside the devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Initialize events outside devlink lock (Kamal Heib) [RHEL-169057]
- net/mlx5: Use EOPNOTSUPP instead of ENOTSUPP (Kamal Heib) [RHEL-169057]
- net/mlx5: Abort new commands if all command slots are stalled (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove redundant bw_share minimal value assignment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recover SQ on excessive PTP TX timestamp delta (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor EEPROM query error handling to return status separately (Kamal Heib) [RHEL-169057]
- mlx5: extract GRXRINGS from .get_rxnfc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose definition for 1600Gbps link mode (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, support eswitch inactive mode (Kamal Heib) [RHEL-169057]
- net/mlx5: MPFS, add support for dynamic enable/disable (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, set non default device per namespace (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, Add other_eswitch support for steering tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Add OTHER_ESWITCH HW capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: Add direct ST mode support for RDMA (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_loc() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Defer channels closure to reduce interface down time (Kamal Heib) [RHEL-169057]
- net/mlx5e: Pass old channels as argument to mlx5e_switch_priv_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Do not re-apply TIR loopback configuration if not necessary (Kamal Heib) [RHEL-169057]
- net/mlx5: IPoIB, set self loopback prevention in TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting self loopback prevention bits on TIR init (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use TIR API in mlx5e_modify_tirs_lb() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Enhance function structures for self loopback prevention application (Kamal Heib) [RHEL-169057]
- net/mlx5e: Convert to new hwtstamp_get/set interface (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename timestamp fields to hwtstamp_config (Kamal Heib) [RHEL-169057]
- net/mlx5e: Rename hwstamp functions to hwtstamp (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unnecessary tstamp local variable in mlx5i_complete_rx_cqe (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove redundant tstamp pointer from channel structures (Kamal Heib) [RHEL-169057]
- net/mlx5: Add balance ID support for LAG multiplane groups (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor HCA cap 2 setting (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor PTP clock devcom pairing (Kamal Heib) [RHEL-169057]
- net/mlx5: Add software system image GUID infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Use common mlx5_same_hw_devs function (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: Query vports mac address from device (Kamal Heib) [RHEL-169057]
- RDMA: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix page size bitmap calculation for KSM mode (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback forcing for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Better estimate max_qp_wr to reflect WQE count (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Enable Data-Direct with Relaxed Ordering (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix validation logic in rate limiting (Kamal Heib) [RHEL-169057]
- net/mlx5: Clean up only new IRQ glue on request_irq() failure (Kamal Heib) [RHEL-169057]
- mlx5: Fix default values in create CQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potentially misleading debug message (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix wraparound in rate limiting for values above 255 Gbps (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix maxrate wraparound in threshold between units (Kamal Heib) [RHEL-169057]
- net/mlx5e: Trim the length of the num_doorbell error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing error assignment in mlx5e_xfrm_add_state() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix return value in case of module EEPROM read error (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't zero user_count when destroying FDB tables (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix IPsec cleanup over MPV device (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to return NULL on failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PPHCR to PCAM supported registers mask (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for striding RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Fix generating skb from non-linear xdp_buff for legacy RQ (Kamal Heib) [RHEL-169057]
- net/mlx5e: Return 1 instead of 0 in invalid case in mlx5e_mpwrq_umr_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5: fix pre-2.40 binutils assembler error (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent tunnel reformat when tunnel mode not allowed (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent tunnel mode conflicts between FDB and NIC IPsec tables (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use extack in set rxfh callback (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_params for RSS configuration (Kamal Heib) [RHEL-169057]
- net/mlx5e: Introduce mlx5e_rss_init_params (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused mdev param from RSS indir init (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve QoS error messages with actual depth values (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent entering switchdev mode with inconsistent netns (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Generalize complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: Improve write-combining test reliability for ARM64 Grace CPUs (Kamal Heib) [RHEL-169057]
- net/mlx5: fw reset, add reset timeout work (Kamal Heib) [RHEL-169057]
- net/mlx5: pagealloc: Fix reclaim race during command interface teardown (Kamal Heib) [RHEL-169057]
- net/mlx5: Stop polling for command response if interface goes down (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC add balance ID and LAG per MP group bits (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bit for TIR/SQ order capability (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5: Use %pe format specifier for error pointers (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove dead code from total_vfs setter (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow rules for the decrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add flow groups for the packets decrypted by crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Recirculate decrypted packets into TTC table (Kamal Heib) [RHEL-169057]
- net/mlx5: Change TTC rules to match on undecrypted ESP packets (Kamal Heib) [RHEL-169057]
- net/mlx5: Add uar access and odp page fault counters (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use unsigned for mlx5e_get_max_num_channels (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use the 'num_doorbells' devlink param (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Use multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using different CQ doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prepare for using multiple TX doorbells (Kamal Heib) [RHEL-169057]
- net/mlx5: Store the global doorbell in mlx5_priv (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused 'xsk' param of mlx5e_build_xdpsq_param (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove unused 'offset' field from mlx5_sq_bfreg (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET (Kamal Heib) [RHEL-169057]
- net/mlx5e: Prevent WQE metadata conflicts between timestamping and offloads (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor MACsec WQE metadata shifts (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove VLAN insertion fields from WQE Ether segment (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, add net namespace support (Kamal Heib) [RHEL-169057]
- net/mlx5: Add net namespace support to devcom (Kamal Heib) [RHEL-169057]
- net/mlx5: Lag, move devcom registration to LAG layer (Kamal Heib) [RHEL-169057]
- net/mlx5: Refactor devcom to use match attributes (Kamal Heib) [RHEL-169057]
- net/mlx5: fix typo in pci_irq.c comment (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add stale counter for PCIe congestion events (Kamal Heib) [RHEL-169057]
- net/mlx5e: Make PCIe congestion event thresholds configurable (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink total_vfs parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement devlink enable_sriov parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Implement cqe_compress_type via devlink params (Kamal Heib) [RHEL-169057]
- net/mlx5: Add RS FEC histogram infrastructure (Kamal Heib) [RHEL-169057]
- net/mlx5: Support getcyclesx and getcrosscycles (Kamal Heib) [RHEL-169057]
- net/mlx5: Extract MTCTR register read logic into helper function (Kamal Heib) [RHEL-169057]
- net/mlx5: Add PSP capabilities structures and bits (Kamal Heib) [RHEL-169057]
- net/mlx5: {DR,HWS}, Use the cached vhca_id for this device (Kamal Heib) [RHEL-169057]
- net/mlx5: E-switch, Set representor attributes for adjacent VFs (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Register representors for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Create acls root namespace for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Add support for adjacent functions vports discovery (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Move vport acls root namespaces creation to eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: FS, Convert vport acls root namespaces to xarray (Kamal Heib) [RHEL-169057]
- eth: mlx5: remove Kconfig co-dependency with VXLAN (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set default burst period for TX and RX reporters (Kamal Heib) [RHEL-169057]
- net/mlx5: Support disabling host PFs (Kamal Heib) [RHEL-169057]
- net/mlx5: Query to see if host PF is disabled (Kamal Heib) [RHEL-169057]
- {rdma,net}/mlx5: export mlx5_vport_get_vhca_id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Set/Query hca cap via vhca id (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Cache vport vhca id on first cap query (Kamal Heib) [RHEL-169057]
- net/mlx5: mlx5_ifc, Add hardware definitions needed for adjacent vports (Kamal Heib) [RHEL-169057]
- net/mlx5: Don't use %pK through tracepoints (Kamal Heib) [RHEL-169057]
- IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Refactor optional counters steering code (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH support for reg_user_mr/reg_user_dmabuf_mr (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add DMAH object support (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix incorrect MKEY masking (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix returned type from _mlx5r_umr_zap_mkey() (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: remove redundant check on err on return expression (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Optimize DMABUF mkey page size (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Align mkc page size capability check to PRM (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add multiple priorities support to RDMA TRANSPORT userspace tables (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Support driver APIs pre_destroy_cq and post_destroy_cq (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix missing FEC RS stats for RS_544_514_INTERLEAVED_QUAD (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, ignore flow level for multi-dest table (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add a miss level for ipsec crypto offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Harden uplink netdev access against device unbind (Kamal Heib) [RHEL-169057]
- net/mlx5e: Set local Xoff after FW update (Kamal Heib) [RHEL-169057]
- net/mlx5: Prevent flow steering mode changes in switchdev mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Nack sync reset when SFs are present (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix lockdep assertion on sync reset unload event (Kamal Heib) [RHEL-169057]
- net/mlx5: Reload auxiliary drivers on fw_activate (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pattern destruction in mlx5hws_pat_get_pattern error path (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix uninitialized variables in mlx5hws_pat_calc_nop error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve shared buffer capacity during headroom updates (Kamal Heib) [RHEL-169057]
- net/mlx5e: Query FW for buffer ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Restore missing scheduling node cleanup on vport enable failure (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix QoS reference leak in vport enable error path (Kamal Heib) [RHEL-169057]
- net/mlx5: Destroy vport QoS element when no configuration remains (Kamal Heib) [RHEL-169057]
- net/mlx5e: Preserve tc-bw during parent changes (Kamal Heib) [RHEL-169057]
- net/mlx5: Remove default QoS group and attach vports directly to root TSAR (Kamal Heib) [RHEL-169057]
- net/mlx5: Base ECVF devlink port attrs from 0 (Kamal Heib) [RHEL-169057]
- net/mlx5: CT: Use the correct counter offset (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix table creation UID (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, don't rehash on every kind of insertion failure (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, prevent rehash from filling up the queues (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix complex rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix simple rules rehash error flow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix bad parameter in CQ creation (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_segs when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Expose TIS via devlink tx reporter diagnose (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support routed networks during IPsec MACs initialization (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix potential deadlock by deferring RX timeout recovery (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove skb secpath if xfrm state is not found (Kamal Heib) [RHEL-169057]
- net/mlx5e: Clear Read-Only port buffer size in PBMC before update (Kamal Heib) [RHEL-169057]
- net: Fix typos (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix build -Wframe-larger-than warnings (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for device steering tag (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose IFC bits for TPH (Kamal Heib) [RHEL-169057]
- PCI/TPH: Expose pcie_tph_get_st_table_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove duplicate mkey from SHAMPO header (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Remove mlx5e_shampo_get_log_hd_entry_size() (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO, Cleanup reservation size formula (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose cable_length field in PFCC register (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits and enums for buf_ownership (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits to support RSS for IPSec offload (Kamal Heib) [RHEL-169057]
- net/mlx5e: Properly access RCU protected qdisc_sleeping variable (Kamal Heib) [RHEL-169057]
- net/mlx5e: fix kdoc warning on eswitch.h (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Enable IPSec hardware offload in legacy mode (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix an IS_ERR() vs NULL bug in esw_qos_move_node() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add device PCIe congestion ethtool stats (Kamal Heib) [RHEL-169057]
- net/mlx5e: Create/destroy PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: IFC updates for disabled host PF (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose disciplined_fr_counter through HCA capabilities in mlx5_ifc (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix UMR modifying of mkey page size (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose HCA capability bits for mkey max page size (Kamal Heib) [RHEL-169057]
- net/mlx5e: RX, Remove unnecessary RQT redirects (Kamal Heib) [RHEL-169057]
- net/mlx5: Warn when write combining is not supported (Kamal Heib) [RHEL-169057]
- net/mlx5e: Replace recursive VLAN push handling with an iterative loop (Kamal Heib) [RHEL-169057]
- net/mlx5e: CT: extract a memcmp from a spinlock section (Kamal Heib) [RHEL-169057]
- net/mlx5e: Remove unused VLAN insertion logic in TX path (Kamal Heib) [RHEL-169057]
- eth: mlx5: migrate to the *_rxfh_context ops (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistake "disabliing" -&gt; "disabling" (Kamal Heib) [RHEL-169057]
- net/mlx5: Add HWS as secondary steering mode (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Shrink empty matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Rearrange to prevent forward declaration (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Track matcher sizes individually (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Decouple matcher RX and TX sizes (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Create STEs directly from matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export rule skip logic (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove incorrect comment (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, remove unused create_dest_array parameter (Kamal Heib) [RHEL-169057]
- net/mlx5: Manage TC arbiter nodes and implement full support for tc-bw (Kamal Heib) [RHEL-169057]
- net/mlx5: Add traffic class scheduling support for vport QoS (Kamal Heib) [RHEL-169057]
- net/mlx5: Add support for setting tc-bw on nodes (Kamal Heib) [RHEL-169057]
- net/mlx5: Add no-op implementation for setting tc-bw on rate objects (Kamal Heib) [RHEL-169057]
- net/mlx5: Check device memory pointer before usage (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, fix RDMA TRANSPORT init cleanup flow (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix error handling in RQ memory model registration (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Allocate IB device with net namespace supplied from core dev (Kamal Heib) [RHEL-169057]
- net/mlx5: Add IFC bits for PCIe Congestion Event object (Kamal Heib) [RHEL-169057]
- net/mlx5: Small refactor for general object capabilities (Kamal Heib) [RHEL-169057]
- net/mlx5: fs, add multiple prios to RDMA TRANSPORT steering domain (Kamal Heib) [RHEL-169057]
- net/mlx5e: Support ethtool tcp-data-split settings (Kamal Heib) [RHEL-169057]
- net/mlx5e: Implement queue mgmt ops and single channel swap (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Separate pool for headers (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Improve hw gro capability checking (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Remove redundant params (Kamal Heib) [RHEL-169057]
- net/mlx5e: SHAMPO: Reorganize mlx5_rq_shampo_alloc (Kamal Heib) [RHEL-169057]
- net/mlx5: Expose serial numbers in devlink info (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix vport loopback for MPV device (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix CC counters query for MPV (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix HW counters query for non-representor devices (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Initialize obj_event-&gt;obj_sub_list before xa_insert (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Avoid flexible array warning (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Add support for 200Gbps per lane speeds (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: convert timeouts to secs_to_jiffies() (Kamal Heib) [RHEL-169057]
- net/mlx5: E-Switch, Fix peer miss rules to use peer eswitch (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix memory leak in cmd_exec() (Kamal Heib) [RHEL-169057]
- net/mlx5: Correctly set gso_size when LRO is used (Kamal Heib) [RHEL-169057]
- net/mlx5e: Add new prio for promiscuous mode (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix race between DIM disable and net_dim() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add error checking to hws_bwc_rule_complex_hash_node_get() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Fix leak of Geneve TLV option object (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, make sure the uplink is the last destination (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix missing ip_version handling in definer (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Init mutex on the correct path (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix return value when searching for existing flow group (Kamal Heib) [RHEL-169057]
- net/mlx5: Ensure fw pages are always allocated on same NUMA (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix an error code in mlx5hws_bwc_rule_create_complex() (Kamal Heib) [RHEL-169057]
- net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid() (Kamal Heib) [RHEL-169057]
- net/mlx5e: Allow setting MAC address of representors (Kamal Heib) [RHEL-169057]
- net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, handle modify header actions dependency (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix typo - 'nope' to 'nop' (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, register reformat actions with fw (Kamal Heib) [RHEL-169057]
- net/mlx5: SWS, fix reformat id error handling (Kamal Heib) [RHEL-169057]
- net/mlx5: Use to_delayed_work() (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, dump bad completion details (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, rework rehash loop (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix redundant extension of action templates (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, fix counting of rules in the matcher (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, force rehash when rule insertion failed (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, support complex matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, introduce isolated matchers (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose polling function in header file (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, add definer function to get field name str (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, expose function mlx5hws_table_ft_set_next_ft in header (Kamal Heib) [RHEL-169057]
- net/mlx5: support software TX timestamp (Kamal Heib) [RHEL-169057]
- RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Disallow matcher IP version mixing (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Harden IP version definer checks (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix IP version decision (Kamal Heib) [RHEL-169057]
- net/mlx5: Fix spelling mistakes in mlx5_core_dbg message and comments (Kamal Heib) [RHEL-169057]
- net/mlx5e: ethtool: Fix formatting of ptp_rq0_csum_complete_tail_slow (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Export action STE tables to debugfs (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Free unused action STE tables (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup matcher action STE table (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Use the new action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Implement action STE pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix pool size optimization (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Add fullness tracking to pool (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Cleanup after pool refactoring (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Refactor pool implementation (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Make pool single resource (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Remove unused element array (Kamal Heib) [RHEL-169057]
- net/mlx5: HWS, Fix matcher action template attach (Kamal Heib) [RHEL-169057]
- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- perf/core: Fix MMAP event path names with backing files (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove redundant IOCB_DIO_CALLER_COMP clearing (Ondrej Mosnacek) [RHEL-179444]
- ovl: remove unneeded non-const conversion (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- ovl: Fix nested backing file paths (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: add helper for blob allocations (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_mmap() helper (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_splice_{read,write}() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: factor out backing_file_{read,write}_iter() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: prepare for stackable filesystems backing file helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: store real path instead of fake path in backing file f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: create helper file_user_path() for user displayed mapped file path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: get mnt_writers count for an open backing file's real path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: rename __mnt_{want,drop}_write*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: Fix kernel-doc warnings (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- cachefiles: use kiocb_{start,end}_write() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- lsm: constify the 'file' parameter in security_binder_transfer_file() (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move cleanup from init_file() into its callers (Ondrej Mosnacek) [RHEL-179444]
- ovl: enable fsnotify events on underlying real files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use backing_file container for internal files with "fake" f_path (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: move kmem_cache_zalloc() into alloc_empty_file*() helpers (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- fs: use a helper for opening kernel internal files (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- locks: fix TOCTOU race when granting write lease (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- binder: use cred instead of task for selinux checks (Ondrej Mosnacek) [RHEL-179444] {CVE-2026-46054}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179664] {CVE-2026-45898}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179310] {CVE-2026-46090}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172670] {CVE-2026-43038}
- drm/amd/display: Do not skip unrelated mode changes in DSC validation (CKI Backport Bot) [RHEL-178836] {CVE-2026-31488}
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176927] {CVE-2026-43329}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.19.1.el9_8]" date="1782388800">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-179994] {CVE-2026-46176}
- init/Kconfig: remove CONFIG_GCC_ASM_GOTO_OUTPUT_WORKAROUND (Waiman Long) [RHEL-183183]
- update workarounds for gcc "asm goto" issue (Waiman Long) [RHEL-183183]
- init/Kconfig: fix CC_HAS_ASM_GOTO_TIED_OUTPUT test with dash (Waiman Long) [RHEL-183183]
- work around gcc bugs with 'asm goto' with outputs (Waiman Long) [RHEL-183183]
- compiler-gcc.h: remove ancient workaround for gcc PR 58670 (Waiman Long) [RHEL-183183]
- powerpc/64: Force inlining of prevent_user_access() and set_kuap() (Waiman Long) [RHEL-183183]
- sched/fair: Have SD_SERIALIZE affect newidle balancing (CKI Backport Bot) [RHEL-182776]
- sched/fair: Skip sched_balance_running cmpxchg when balance is not due (CKI Backport Bot) [RHEL-182776]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179955] {CVE-2026-46189}
- sctp: discard stale INIT after handshake completion (CKI Backport Bot) [RHEL-178273]
- netfilter: skip recording stale or retransmitted INIT (CKI Backport Bot) [RHEL-178273]
- iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler (CKI Backport Bot) [RHEL-172993]
- iavf: wait for PF confirmation before removing VLAN filters (CKI Backport Bot) [RHEL-172993]
- iavf: stop removing VLAN filters from PF on interface down (CKI Backport Bot) [RHEL-172993]
- iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING (CKI Backport Bot) [RHEL-172993]
- iavf: fix VLAN filter lost on add/delete race (CKI Backport Bot) [RHEL-172993]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.19.1" date="1782734400">- Recreate RHEL 5.14.0-687.19.1 from CentOS Stream 9 and upstream stable backports (1313-1695)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.18.1..687.19.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.20.1.el9_8]" date="1782734401">- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182540]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182540]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182540]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174243] {CVE-2026-43198}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182760] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182760]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182760]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181886]
- net: atm: fix crash due to unvalidated vcc pointer in sigd_send() (CKI Backport Bot) [RHEL-167051] {CVE-2026-31411}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.20.1" date="1782820800">- Recreate RHEL 5.14.0-687.20.1 from CentOS Stream 9 and upstream stable backports (1696-1709)
- Retain AlmaLinux ahead-of-RHEL fix for CVE-2026-46316 (1312)
- RHEL changelog for 687.19.1..687.20.1 follows:</changelog>
</package>
<package pkgid="6e43016f4f31ff73ef82bb004a983b970f83c21541bbba803adee54ae4e7e125" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.22.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.21.1.el9_8]" date="1782993600">- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189503] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add NVIDIA Olympus definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: errata: Apply workarounds for Neoverse-V3AE (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add Neoverse-V3AE definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- Clean up documentation mess left by previous backport (Mark Salter) [RHEL-183625] {CVE-2025-10263}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183969] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181929] {CVE-2026-46244}
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181907] {CVE-2026-46259}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179909] {CVE-2026-46209}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179865] {CVE-2026-46227}
- nouveau/gsp: drop WARN_ON in ACPI probes (Lyude Paul) [RHEL-160966]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.22.1" date="1783425600">- Recreate RHEL 5.14.0-687.22.1 from CentOS Stream 9 and upstream stable backports (1713-1735)
- Retain AlmaLinux ahead-of-RHEL fixes: KVM x86 shadow paging (1710-1711), eventpoll
  ep_remove use-after-free CVE-2026-46242 (1712)
- RHEL 5.14.0-687.21.1 now also carries the vgic-its fix (CVE-2026-46316); the AlmaLinux
  ahead-patch (1312) is retained and RHEL's duplicate copy omitted
- CONFIG_ARM64_ERRATUM_4118414 enabled for aarch64 (CVE-2025-10263)
- RHEL changelog for 687.21.1..687.22.1 follows:</changelog>
</package>
<package pkgid="da00ffcd4e848651f4e6dce9f55733e050513529bbfeffcb073ddecbd3ac5edd" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.23.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.23.1" date="1783512000">- Recreate RHEL 5.14.0-687.23.1 from CentOS Stream and upstream stable backports (1739-1755)
- The AlmaLinux ahead-of-RHEL eventpoll CVE-2026-46242 fix (1712) is superseded by
  RHEL's eventpoll series carrying the same fix and is dropped
- Temporarily drop the rtmutex remove_waiter() fixes (1736, 1738)
- RHEL changelog for 687.23.1 follows:</changelog>
</package>
<package pkgid="41324ae6df925553f4c094f1c3e787be39e3db146569155edc4b3dd56ad0c307" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.24.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
</package>
<package pkgid="af4f4876d9b79d3dbdeb0723cf3bf8c2896fb57488c540fdadafcfa2d200b368" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.25.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
</package>
<package pkgid="50afa0232dfe5dbdb02ecf3fa4c10c55c860eddc84f1b2355720fedee7911655" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.26.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.24.1" date="1783598400">- Recreate RHEL 5.14.0-687.24.1 from upstream stable backports (1758-1760)
- The AlmaLinux ahead-of-RHEL KVM x86 shadow paging fixes (1710, 1711) are
  superseded by RHEL's copies and dropped
- RHEL changelog for 687.24.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598401">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.25.1" date="1783944000">- Recreate RHEL 5.14.0-687.25.1 from CentOS Stream 9 and upstream stable backports (1761-1769)
- The AlmaLinux ahead-of-RHEL rtmutex remove_waiter() fixes for CVE-2026-43499
  (1756, 1757) are superseded by RHEL's copies and dropped
- RHEL changelog for 687.25.1 follows:</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1783944001">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.26.1" date="1784030400">- Recreate RHEL 5.14.0-687.26.1 from CentOS Stream 9 backports (1770)
- RHEL changelog for 687.26.1 follows:</changelog>
</package>
<package pkgid="2fa2fdd69493a7852744890e9a6a2a9129a436bc5566ee2ed872d98d4d4a9c9b" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.29.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.22.1.el9_8]" date="1783339200">- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180041] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180041]
- xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete (Sabrina Dubroca) [RHEL-180176] {CVE-2026-46116}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [RHEL-177878] {CVE-2026-46323}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180271] {CVE-2026-43276}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339201">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.29.1" date="1784808001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="338b731476a143fad2c21eafa028535a86ed12d2028799acb59068c5b963f348" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.30.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.23.1.el9_8]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180773]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180773]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180773]
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180773]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180773]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180773]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180773] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180773]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180773]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180773]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173830] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180773]
- netfilter: bridge: make ebt_snat ARP rewrite writable (CKI Backport Bot) [RHEL-182344]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182768]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.30.1" date="1785499201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="ad380fe35305ea15a36406235edfa0507ae765f9588450833492c37fdca37daf" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.31.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.24.1.el9_8]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192400] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186702] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183004] {CVE-2025-71066}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.25.1.el9_8]" date="1783598400">- futex/requeue: Revert "Prevent NULL pointer dereference in remove_waiter() on self-deadlock"" (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Phil Auld) [RHEL-193245] {CVE-2026-53166}
- futex/requeue: Prevent NULL pointer dereference in remove_waiter() on self-deadlock (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Phil Auld) [RHEL-193151] {CVE-2026-43499}
- net: bridge: use a stable FDB dst snapshot in RCU readers (Mohammad Heib) [RHEL-179330] {CVE-2026-46086}
- kallsyms/bpf: rename __bpf_address_lookup() to bpf_address_lookup() (Anubhav Shelat) [RHEL-183236]
- kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() (Anubhav Shelat) [RHEL-183236]
- net: fix memory leak in skb_segment_list for GRO packets (CKI Backport Bot) [RHEL-189959] {CVE-2026-22979}
- crypto: ccp - copy IV using skcipher ivsize (CKI Backport Bot) [RHEL-188459] {CVE-2026-53016}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.31.1" date="1785585601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="f33ce992cca4dc184a24b80d351d013f3adfe3ea4cb0e1e2fc9435a18674eed2" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.33.1.el9_8"/>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [5.14.0-687.26.1.el9_8]" date="1784030400">- xfs: resample the data fork mapping after cycling ILOCK (Carlos Maiolino) [RHEL-193937]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931200">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.33.1" date="1785931201">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="19b4c25506456a353c9583da40e7a592c34919ae4e80978159243b94785d8c26" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.34.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.27.1.el9_8]" date="1784203200">- drm/gem: Try to fix change_handle ioctl, attempt 4 (Jocelyn Falempe) [RHEL-179886]
- drm/gem: fix race between change_handle and handle_delete (Jocelyn Falempe) [RHEL-179886]
- drm: Replace old pointer to new idr (Jocelyn Falempe) [RHEL-179886]
- drm: Set old handle to NULL before prime swap in change_handle (Jocelyn Falempe) [RHEL-179886] {CVE-2026-46215}
- drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl() (Jocelyn Falempe) [RHEL-179886]
- crypto: af_alg - zero initialize memory allocated via sock_kmalloc (Herbert Xu) [RHEL-189943] {CVE-2025-71113}
- crypto: af_alg - Disallow multiple in-flight AIO requests (Herbert Xu) [RHEL-189943]
- scsi: core: Wake up the error handler when final completions race against each other (CKI Backport Bot) [RHEL-189975] {CVE-2026-23110}
- net/mlx5: HWS: Reject unsupported remove-header action (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA (Kamal Heib) [RHEL-188121]
- net/mlx5: Do not restore destination-less TC rules (Kamal Heib) [RHEL-188121]
- net/mlx5e: Don't leak RSS context in case of error (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix race condition in secondary device probe/remove (Kamal Heib) [RHEL-188121]
- net/mlx5e: SD, Fix missing cleanup on probe error (Kamal Heib) [RHEL-188121]
- net/mlx5: SD, Keep multi-pf debugfs entries on primary (Kamal Heib) [RHEL-188121]
- net/mlx5: SD: Serialize init/cleanup (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Add missing store/release for lock elision pattern (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix null-ptr-deref in Raw Packet QP creation (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in DCT destroy due to race with create (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UAF in SRQ destroy due to race with create (Kamal Heib) [RHEL-188121]
- net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix features not applied during netdev registration (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix switchdev mode rollback in case of failure (Kamal Heib) [RHEL-188121]
- net/mlx5: Avoid "No data available" when FW version queries fail (Kamal Heib) [RHEL-188121]
- net/mlx5: lag: Check for LAG device before creating debugfs (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix race condition during IPSec ESN update (Kamal Heib) [RHEL-188121]
- net/mlx5e: Prevent concurrent access to IPSec ASO context (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix deadlock between devlink lock and esw-&gt;wq (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix missing devlink lock in SRIOV enable error path (Kamal Heib) [RHEL-188121]
- net/mlx5: E-switch, Clear legacy flag when moving to switchdev (Kamal Heib) [RHEL-188121]
- net/mlx5: LAG, disable MPESW in lag_disable_change() (Kamal Heib) [RHEL-188121]
- net/mlx5: DR, Fix circular locking dependency in dump (Kamal Heib) [RHEL-188121]
- net/mlx5e: MACsec, add ASO poll loop in macsec_aso_set_arm_event (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix misidentification of write combining CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5e: Fix misidentification of ASO CQE during poll loop (Kamal Heib) [RHEL-188121]
- net/mlx5: Fix multiport device check over light SFs (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix memory leak in GET_DATA_DIRECT_SYSFS_PATH handler (Kamal Heib) [RHEL-188121]
- IB/mlx5: Fix port speed query for representors (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix UMR hang in LAG error state unload (Kamal Heib) [RHEL-188121]
- RDMA/mlx5: Fix ucaps init error flow (Kamal Heib) [RHEL-188121]
- Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp (CKI Backport Bot) [RHEL-188333] {CVE-2026-53071}
- libperf build: Always place libperf includes first (Michael Petlan) [RHEL-183980]
- libperf: Don't remove -g when EXTRA_CFLAGS are used (Michael Petlan) [RHEL-183980]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.28.1.el9_8]" date="1784548800">- fanotify: fix false positive on permission events (CKI Backport Bot) [RHEL-180073] {CVE-2026-46150}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.34.1" date="1786017601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="c98754efc7c65807d331308e4eff23e6561881cd22168c08a33ebd55f4a0a6ed" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.36.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.29.1.el9_8]" date="1784635200">- can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF (Jamie Bainbridge) [RHEL-212685]
- dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() (CKI Backport Bot) [RHEL-212061]
- net: ipv6: fix NOREF dst use in seg6 and rpl lwtunnels (Antoine Tenart) [RHEL-179297] {CVE-2026-46099}
- xfrm: esp: restore combined single-frag length gate (CKI Backport Bot) [RHEL-178337]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.30.1.el9_8]" date="1784721600">- KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level (Aidan Wallace) [RHEL-213468] {CVE-2026-63807}
- KVM: nVMX: Hide shadow VMCS right after VMCLEAR (Aidan Wallace) [RHEL-213468]
- KVM: x86: Check for invalid/obsolete root *after* making MMU pages available (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state (Aidan Wallace) [RHEL-213468]
- KVM: nVMX: Add helper to put (unmap) vmcs12 pages (Paolo Bonzini) [RHEL-211277]
- KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (Aidan Wallace) [RHEL-211277] {CVE-2025-40026}
- scsi: core: Run queues for all non-SDEV_DEL devices from scsi_run_host_queues (David Jeffery) [RHEL-187412]
- drm/xe/dma-buf: fix UAF with retry loop (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe/dma-buf: handle empty bo and UAF races (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix bo leak in xe_dma_buf_init_obj() on allocation failure (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- drm/xe: Fix dma-buf attachment leak in xe_gem_prime_import() (Anusha Srivatsa) [RHEL-192228] {CVE-2026-52950}
- ipv6: fix possible UAF in icmpv6_rcv() (CKI Backport Bot) [RHEL-192220] {CVE-2026-53006}
- drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() (CKI Backport Bot) [RHEL-188647] {CVE-2026-52976}
- dm log: fix out-of-bounds write due to region_count overflow (CKI Backport Bot) [RHEL-188541] {CVE-2026-53059}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.36.1" date="1786104001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="46ced0095788c1d53890efcb762bab8f25ece554faa6c5c8572796a4446a1bc1" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.38.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.31.1.el9_8]" date="1785153600">- blk-mq: reinsert cached request to the list (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- blk-mq: pop cached request if it is usable (CKI Backport Bot) [RHEL-213163] {CVE-2026-64017}
- futex: Drop CLONE_THREAD requirement for private default hash alloc (Audra Mitchell) [RHEL-193517] {CVE-2026-52973}
- watchdog: Fix NULL pointer dereference when releasing cdev (Krzysztof Pawlinski) [RHEL-193729]
- redhat/configs: enable watchdog pretimout panic functionality for x86 (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: Switch to use hrtimer_setup() (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Convert comma to semicolon (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: wdat_wdt: Add timeout value as a param in ping method (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Report firmware_version (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Set NO_REBOOT if the watchdog is not already running (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Using existing macro define covers more scenarios (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: No need to stop the timer in probe (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: only run driver set_pretimeout op if device supports it (Krzysztof Pawlinski) [RHEL-193729]
- watchdog: iTCO_wdt: Make use of the helper function devm_platform_ioremap_resource() (Krzysztof Pawlinski) [RHEL-193729]
- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- xfrm: Duplicate SPI Handling (Sabrina Dubroca) [RHEL-180033] {CVE-2025-39797}
- iommu/vt-d: Avoid NULL pointer dereference or refcount corruption (Eder Zulian) [RHEL-190342] {CVE-2026-53281}
- iommu/vt-d: Fix oops due to out of scope access (Eder Zulian) [RHEL-190342]
- lib/buildid: use __kernel_read() for sleepable context (CKI Backport Bot) [RHEL-189962] {CVE-2026-23002}
- nfsd: use correct loop termination in nfsd4_revoke_states() (CKI Backport Bot) [RHEL-188257]
- nfsd: check that server is running in unlock_filesystem (CKI Backport Bot) [RHEL-188257]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.38.1" date="1786536001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="0515db210529a5126b16ac9ee5d1b0bb294413932d1aa3dcf2fcc81599d122ec" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.39.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.32.1.el9_8]" date="1785240000">- tipc: fix double-free in tipc_buf_append() (CKI Backport Bot) [RHEL-192184] {CVE-2026-52993}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.33.1.el9_8]" date="1785326400">- net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle (CKI Backport Bot) [RHEL-213299] {CVE-2026-64530}
- ipc: limit next_id allocation to the valid ID range (Rafael Aquini) [RHEL-188214] {CVE-2026-52923}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054400">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.39.1" date="1787054401">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="e9e5f35b60f526456741e35ea3f57df6fb820a1b58ac99ae71f863343ec4a962" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.41.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.34.1.el9_8]" date="1785758400">- s390/mm: Ensure physical addr derived from page is passed in to uv_convert_from_secure() (Lucas Oakley) [RHEL-192430]
- s390/mm: Fix phys_to_folio() usage in do_secure_storage_access() (Charles Haithcock) [RHEL-216471]
- gfs2: page poisoning fix (CKI Backport Bot) [RHEL-214021]
- timers: Fix NULL function pointer race in timer_shutdown_sync() (CKI Backport Bot) [RHEL-189940] {CVE-2025-68214}
- net: wwan: t7xx: Add delay between MD and SAP suspend (CKI Backport Bot) [RHEL-184273]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313600">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.41.1" date="1787313601">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="65ac58b827a820aabff214b0f2c9c340aa0f2ada16137b3c755aa1ddca9db05e" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.42.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.35.1.el9_8]" date="1785844800">- octeon_ep_vf: add NULL check for napi_build_skb() (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: introduce octep_vf_oq_next_idx() helper (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: avoid compiler and IQ/OQ reordering (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: Relocate counter updates before NAPI (CKI Backport Bot) [RHEL-186331]
- octeon_ep_vf: ensure dbell BADDR updation (CKI Backport Bot) [RHEL-186331]
- net: octeon_ep_vf: fix free_irq dev_id mismatch in IRQ rollback (CKI Backport Bot) [RHEL-186331]
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() (CKI Backport Bot) [RHEL-179745] {CVE-2026-43450}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.36.1.el9_8]" date="1785931200">- powerpc/powernv/iommu: iommu incorrectly bypass DMA APIs (Mamatha Inamdar) [RHEL-215575]
- powerpc/iommu: bypass DMA APIs for coherent allocations for pre-mapped memory (Mamatha Inamdar) [RHEL-215575]
- mm/vmscan: add sysctl to limit direct reclaim scanning depth (Audra Mitchell) [RHEL-211058]
- mm/memcg: refactor try_charge_memcg retry logic to use for loop (Audra Mitchell) [RHEL-211058]
- mm/memcg: introduce tunable sysctl for memory cgroup reclaim retries (Audra Mitchell) [RHEL-211058]
- futex: Prevent lockup in requeue-PI during signal/ timeout wakeup (Waiman Long) [RHEL-193526] {CVE-2026-52977}
- futex: Require sys_futex_requeue() to have identical flags (Waiman Long) [RHEL-193526] {CVE-2026-31554}
- futex: Clear stale exiting pointer in futex_lock_pi() retry path (Waiman Long) [RHEL-193526] {CVE-2026-31555}
- futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() (Waiman Long) [RHEL-193526] {CVE-2026-23415}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.37.1.el9_8]" date="1786104000">- s390/pkey: Check length in pkey_pckmo handler implementation (Ramesh Chhetri) [RHEL-215578]
- s390/pkey: Check length in PKEY_VERIFYPROTK ioctl (Ramesh Chhetri) [RHEL-215580]
- net: openvswitch: reject oversized nested action attrs (CKI Backport Bot) [RHEL-222495] {CVE-2026-64531}
- cxl/port: Fix use after free of parent_port in cxl_detach_ep() (Myron Stowe) [RHEL-180691] {CVE-2026-31530}
- net/mlx5: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list (CKI Backport Bot) [RHEL-213036]
- x86/CPU/AMD: Prevent improper isolation of shared resources in Zen2's op cache (Dennis Chen) [RHEL-188790] {CVE-2025-54518}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.38.1.el9_8]" date="1786363200">- cifs: fix time_last_write stamp placement in setattr/truncate paths (Paulo Alcantara) [RHEL-192999]
- cifs: consolidate time_last_write stamp into _cifsFileInfo_put() (Paulo Alcantara) [RHEL-192999]
- cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths (Paulo Alcantara) [RHEL-192999]
- cifs: prevent readdir from changing file size due to stale directory metadata (Paulo Alcantara) [RHEL-192999]
- smb: client: fix dir separator in SMB1 UNIX mounts (Paulo Alcantara) [RHEL-192999]
- smb: client: fix sbflags initialization (Paulo Alcantara) [RHEL-192999]
- smb: client: use atomic_t for mnt_cifs_flags (Paulo Alcantara) [RHEL-192999]
- mm/slab: do not limit zeroing to orig_size when only red zoning is enabled (Rafael Aquini) [RHEL-223404] {CVE-2026-64368}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.39.1.el9_8]" date="1786536000">- x86/mm: Add missing saved dirty bit to page protection change mask (Luiz Capitulino) [RHEL-220787]
- net/sched: act_api: use RCU with deferred freeing for action lifecycle (CKI Backport Bot) [RHEL-218181] {CVE-2026-53264}
- KVM: SVM: make svm_flush_tlb_gva do a full asid flush if NPT enabled (Paolo Bonzini) [RHEL-214434]
- KVM: x86: hyper-v: Validate all GVAs during PV TLB flush (Paolo Bonzini) [RHEL-214434]
- accel/ivpu: Fix signed integer truncation in IPC receive (CKI Backport Bot) [RHEL-192081] {CVE-2026-53202}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.40.1.el9_8]" date="1786968000">- scsi: target: iscsi: Fix CRC overread and double-free in iscsit_handle_text_cmd() (Maurizio Lombardi) [RHEL-213222] {CVE-2026-63888}
- smb: client: fix SMB1 TRANS2 multi-response truncation in SendReceive() (Paulo Alcantara) [RHEL-235811]
- drm/amdgpu: fix amdgpu_hmm_range_get_pages (José Expósito) [RHEL-222614] {CVE-2026-63879}
- drm/amd/display: Use krealloc_array() in dal_vector_reserve() (CKI Backport Bot) [RHEL-222668] {CVE-2026-53329}
- drm/amd/display: Clamp VBIOS HDMI retimer register count to array size (CKI Backport Bot) [RHEL-222683] {CVE-2026-53136}
- drm/amdkfd: Fix buffer overflow in SDMA queue checkpoint/restore on GFX11 (CKI Backport Bot) [RHEL-222703] {CVE-2026-53143}
- drm/amdkfd: Fix watch_id bounds checking in debug address watch v2 (CKI Backport Bot) [RHEL-222718] {CVE-2026-45878}
- drm/i915: Fix potential UAF in TTM object purge (CKI Backport Bot) [RHEL-222742] {CVE-2026-63884}
- drm/i915/gem: Fix phys BO pread/pwrite with offset (CKI Backport Bot) [RHEL-222748] {CVE-2026-53356}
- drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async (CKI Backport Bot) [RHEL-222571] {CVE-2026-64219}
- drm/amdgpu: zero-initialize GART table on allocation (CKI Backport Bot) [RHEL-222647] {CVE-2026-53374}
- drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() (CKI Backport Bot) [RHEL-221333] {CVE-2026-43206}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4 (CKI Backport Bot) [RHEL-221368] {CVE-2026-43237}
- wifi: iwlwifi: reduce encryption error message to debug level in FIPS mode (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: iwlwifi: restore FIPS-disabled features with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- wifi: mac80211: allow keys to driver with fips exception (Jose Ignacio Tornos Martinez) [RHEL-181065]
- crypto: fips: add rh_fips_exception kernel boot parameter and fips_allows() helper (Jose Ignacio Tornos Martinez) [RHEL-181065]
- netfilter: nf_conntrack_h323: fix OOB read in decode_choice() (CKI Backport Bot) [RHEL-230625] {CVE-2026-43233}
- netfilter: synproxy: refresh tcphdr after skb_ensure_writable (CKI Backport Bot) [RHEL-228909] {CVE-2026-64007}
- memfd: deny writeable mappings when implying SEAL_WRITE (Luiz Capitulino) [RHEL-228523] {CVE-2026-63952}
- mm/memfd: fix spelling in memfd_add_seals() (Luiz Capitulino) [RHEL-228523]
- vhost: reset the vring metadata cache on vring reconfiguration (CKI Backport Bot) [RHEL-224549]
- udf: fix partition descriptor append bookkeeping (CKI Backport Bot) [RHEL-179581] {CVE-2026-45991}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.41.1.el9_8]" date="1787140800">- smb: client: validate DFS referral PathConsumed (CKI Backport Bot) [RHEL-237668] {CVE-2026-68343}
- posix-cpu-timers: Prevent UAF caused by non-leader exec() race (Waiman Long) [RHEL-227844] {CVE-2026-64560}
- posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path (Waiman Long) [RHEL-227844] {CVE-2026-64370}
- posix-timers: Retrieve interval in common timer_settime() code (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Simplify posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Remove incorrect comment in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Use @now instead of @val for clarity (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Do not arm SIGEV_NONE timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Replace old expiry retrieval in posix_cpu_timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_set() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle SIGEV_NONE timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Handle interval timers correctly in timer_get() (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Save interval only for armed timers (Waiman Long) [RHEL-227844]
- posix-cpu-timers: Split up posix_cpu_timer_get() (Waiman Long) [RHEL-227844]
- smb/client: handle overlapping allocated ranges in fallocate (CKI Backport Bot) [RHEL-236207] {CVE-2026-68388}
- smb: client: mask server-provided mode to 07777 in modefromsid (CKI Backport Bot) [RHEL-234528] {CVE-2026-64379}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (Waiman Long) [RHEL-232554]
- sched/psi: Create the psimon kthread outside of cgroup_mutex (Waiman Long) [RHEL-232554]
- sched/psi: fix race between file release and pressure write (Waiman Long) [RHEL-232554] {CVE-2026-52991}
- smb: client: fix query_info() replay double-free (CKI Backport Bot) [RHEL-234121] {CVE-2026-64386}
- smb: client: fix double-free in SMB2_open() replay (CKI Backport Bot) [RHEL-234107] {CVE-2026-64382}
- mm/huge_memory: update file PMD counter before folio_put() (Luiz Capitulino) [RHEL-231225] {CVE-2026-53189}
- net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot (CKI Backport Bot) [RHEL-230090] {CVE-2026-64048}
- ip6_gre: Use cached t-&gt;net in ip6erspan_changelink(). (CKI Backport Bot) [RHEL-180144] {CVE-2026-46120}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.42.1.el9_8]" date="1787572800">- net: ipv6: clear suppressed fib6 rule result (Paolo Abeni) [RHEL-246347] {CVE-2026-74581}
- s390/ap: Restrict driver_override versus apmask and aqmask use (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Rename mutex ap_perms_mutex to ap_attr_mutex (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Support driver_override for AP queue devices (Ramesh Chhetri) [RHEL-245333]
- s390/ap: Use all-bits-one apmask/aqmask for vfio in_use() checks (Ramesh Chhetri) [RHEL-245333]
- i2c: stub: Reject I2C block transfers with invalid length (CKI Backport Bot) [RHEL-232111] {CVE-2026-64191}
- Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count (CKI Backport Bot) [RHEL-231440] {CVE-2026-64277}
- netfilter: require Ethernet MAC header before using eth_hdr() (CKI Backport Bot) [RHEL-230679] {CVE-2026-53131}
- Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count (CKI Backport Bot) [RHEL-230236] {CVE-2026-64276}
- netfilter: xt_policy: fix strict mode inbound policy matching (CKI Backport Bot) [RHEL-228843] {CVE-2026-52920}
- netfilter: ipset: fix race between dump and ip_set_list resize (CKI Backport Bot) [RHEL-227673] {CVE-2026-64189}
- netfilter: conntrack_irc: fix possible out-of-bounds read (CKI Backport Bot) [RHEL-225252] {CVE-2026-53268}
- ksm: use range-walk function to jump over holes in scan_get_next_rmap_item (CKI Backport Bot) [RHEL-189901] {CVE-2025-68211}
- crypto: qat - cancel work on re-enable SR-IOV timeout (CKI Backport Bot) [RHEL-166118]
- sctp: hold socket lock when dumping endpoints in sctp_diag (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold sock lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- sctp: Prevent TOCTOU out-of-bounds write (Jamie Bainbridge) [RHEL-212398]
- sctp: Hold RCU read lock while iterating over address list (Jamie Bainbridge) [RHEL-212398]
- zram: fix use-after-free in zram_bvec_write_partial() (CKI Backport Bot) [RHEL-191439] {CVE-2026-53185}
- ip6_tunnel: use skb_vlan_inet_prepare() in __ip6_tnl_rcv() (CKI Backport Bot) [RHEL-189965] {CVE-2026-23003}
- netfilter: nft_set_pipapo_avx2: don't return non-matching entry on expiry (CKI Backport Bot) [RHEL-189532] {CVE-2026-43114}
- sctp: purge outqueue on stale COOKIE-ECHO handling (CKI Backport Bot) [RHEL-188198] {CVE-2026-52924}</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832000">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.42.1" date="1787832001">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="9dd6eea62303d132463444984ebf657952d23bf892c0e576980689e6abe59220" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.1.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-686.el9]" date="1771502400">- pmdomain: core: Move the unused cleanup to a _sync initcall (Rupinderjit Singh) [RHEL-147489]
- net/ipv4: Use nested-BH locking for ipv4_tcp_sk. (Davide Caratti) [RHEL-82508]
- ipv4/tcp: do not use per netns ctl sockets (Davide Caratti) [RHEL-82508]
- cpuidle: menu: Use residency threshold in polling state override decisions (Mark Langsdorf) [RHEL-135548]
- spi: tegra210-qspi: Remove cache operations (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Check hardware status on timeout (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Refactor error handling into helper functions (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Fix timeout handling (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Add support for internal DMA (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: Update dummy sequence configuration (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: add rate limiting and simplify timeout error message (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts (Charles Mirabile) [RHEL-127129]
- spi: tegra210-quad: modify chip select (CS) deactivation (Charles Mirabile) [RHEL-127129]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
</package>
<package pkgid="de7c3b36da09f5ef3b3d74f2257ac7fa4275050301c28d32844d103932517580" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.3.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.el9]" date="1771848000">- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-148619]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-148619]
- smb: client: fix data corruption due to racy lease checks (Paulo Alcantara) [RHEL-148619]
- smb: client: fix regression with mount options parsing (Paulo Alcantara) [RHEL-148619]
- Revert: ipmi:msghandler: Move timer handling into a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move SI type information into an info structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use READ_ONCE on run_to_completion (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Rename recv_work to smi_work (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Deliver user messages in a work queue (Tony Camuso) [RHEL-149762]
- Revert: ipmi_msghandler: Change the events lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Use the system_wq, not system_bh_wq (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu from the ipmi user structure (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove srcu for the ipmi_interfaces list (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Change lock to mutex (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a note about the pretimeout callback (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove some user level processing in panic mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix locking around users and interfaces (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't acquire a user refcount for queued messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't check for shutdown when returning responses (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Remove proc_fs.h (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Shut down lower layer first at unregister (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Add a error return from unhandle LAN cmds (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Rework startup of IPMI devices (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Don't deliver messages to deleted users (Tony Camuso) [RHEL-149762]
- Revert: ipmi:ssif: Fix a shutdown race (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Export and fix panic messaging capability (Tony Camuso) [RHEL-149762]
- Revert: ipmi:watchdog: Use the new interface for panic messages (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler: Fix potential memory corruption in ipmi_create_user() (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix strcpy source and destination the same (Tony Camuso) [RHEL-149762]
- Revert: char: ipmi: remove redundant variable 'type' and check (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Use dev_warn_ratelimited() for incorrect message warnings (Tony Camuso) [RHEL-149762]
- Revert: ipmi:msghandler:Change seq_lock to a mutex (Tony Camuso) [RHEL-149762]
- Revert: Revert "ipmi: fix msg stack when IPMI is disconnected" (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rework user message limit handling (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Differentiate between reset and firmware update in maintenance (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Disable sysfs access and requests in maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add a maintenance mode sysfs file (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Set a timer for maintenance mode (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Merge some if statements (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Move flags get start to its own function (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Allow an SMI sender to return an error (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Rename "user_data" to "recv_msg" in an SMI message (Tony Camuso) [RHEL-149762]
- Revert: ipmi:si: Gracefully handle if the BMC is non-functional (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Add Loongson-2K BMC support (Tony Camuso) [RHEL-149762]
- Revert: ipmi: Fix handling of messages with provided receive message pointer (Tony Camuso) [RHEL-149762]
- nvme: fix memory leak in quirks_param_set() (Maurizio Lombardi) [RHEL-148489]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
</package>
<package pkgid="dd4db0cc38fab9fd7d320a264a0f287940fcb72768f35bca13533f9ce18977b2" name="libperf-devel" arch="aarch64">
  <version epoch="0" ver="5.14.0" rel="687.5.4.el9_8"/>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.1.1.el9_8]" date="1772625600">- mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: add missing hugetlb_lock in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: convert use of struct page to folio in __unmap_hugepage_range() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor __unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: refactor unmap_hugepage_range() to take folio instead of page (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: pass folio instead of page to unmap_ref_private() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/hugetlb: fix hugetlb_pmd_shared() (Rafael Aquini) [RHEL-150765] {CVE-2026-23100}
- mm/hugetlb: fix copy_hugetlb_page_range() to use -&gt;pt_share_count (Rafael Aquini) [RHEL-150765]
- mm: hugetlb: independent PMD page table shared count (Rafael Aquini) [RHEL-150765] {CVE-2024-57883}
- mm/rmap: fix two comments related to huge_pmd_unshare() (Rafael Aquini) [RHEL-150765]
- mm/rmap: introduce and use hugetlb_remove_rmap() (Rafael Aquini) [RHEL-150765]
- x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings() (Rafael Aquini) [RHEL-150765] {CVE-2025-39845}
- mm: introduce and use {pgd,p4d}_populate_kernel() (Rafael Aquini) [RHEL-150765]
- mm: move page table sync declarations to linux/pgtable.h (Rafael Aquini) [RHEL-150765] {CVE-2025-39844}
- redhat: update self-test data (Patrick Talbert)
- redhat: set defaults for 9.8 (Patrick Talbert)
- gitlab-ci: disttag override for 9.8 (Patrick Talbert)
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143546] {CVE-2025-71085}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.2.1.el9_8]" date="1773230400">- netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate() (CKI Backport Bot) [RHEL-149749] {CVE-2026-23111}
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152386] {CVE-2026-23171}
- Add signing key for Nvidia Jetson and Bluefield GPU signing keys (Enrique Belarte Luque) [RHEL-145938]
- Add NVIDIA Jetson signing key for OOT modules (Enrique Belarte Luque) [RHEL-145938]
- vsock: lock down child_ns_mode as write-once (Stefano Garzarella) [RHEL-117126]
- vsock: Use container_of() to get net namespace in sysctl handlers (Stefano Garzarella) [RHEL-117126]
- vsock: prevent child netns mode switch from local to global (Stefano Garzarella) [RHEL-117126]
- vsock: fix child netns mode initialization (Stefano Garzarella) [RHEL-117126]
- vsock: add netns support to virtio transports (Stefano Garzarella) [RHEL-117126]
- virtio: set skb owner of virtio_transport_reset_no_sock() reply (Stefano Garzarella) [RHEL-117126]
- vsock: add netns to vsock core (Stefano Garzarella) [RHEL-117126]
- vhost/vsock: improve RCU read sections around vhost_vsock_get() (Stefano Garzarella) [RHEL-117126]
- vsock: fix lock inversion in vsock_assign_transport() (Stefano Garzarella) [RHEL-117126]
- vsock: Do not allow binding to VMADDR_PORT_ANY (Stefano Garzarella) [RHEL-117126]
- vsock: reset socket state when de-assigning the transport (Stefano Garzarella) [RHEL-117126]
- vsock/virtio: cancel close work in the destructor (Stefano Garzarella) [RHEL-117126]
- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149693]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.3.1.el9_8]" date="1774008000">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (Benjamin Tissoires) [RHEL-142234] {CVE-2025-39818}
- NFSv4: Check for delegation validity in nfs_start_delegation_return_locked() (Scott Mayhew) [RHEL-151415]
- perf/amd/ibs: Avoid calling perf_allow_kernel() from the IBS NMI handler (Michael Petlan) [RHEL-155340]
- perf: Extend the bit width of the arch-specific flag (Michael Petlan) [RHEL-155340]
- perf: Remove unnecessary parameter of security check (Michael Petlan) [RHEL-155340]
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150423] {CVE-2026-23193}
- nfsd: add list_head nf_gc to struct nfsd_file (Roberto Bergantinos Corpas) [RHEL-152552]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- gfs2: less aggressive low-memory log flushing (Andreas Gruenbacher) [RHEL-153055]
- io_uring: graduate to full support (Jeff Moyer) [RHEL-120699]
- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153270] {CVE-2026-23231}
- net: atm: fix /proc/net/atm/lec handling (Hangbin Liu) [RHEL-146424] {CVE-2025-38180}
- net: atm: add lec_mutex (Hangbin Liu) [RHEL-146424]
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150227]
- macvlan: fix error recovery in macvlan_common_newlink() (Hangbin Liu) [RHEL-150227] {CVE-2026-23209}
- spi: tegra210-quad: Protect curr_xfer check in IRQ handler (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Move curr_xfer read inside spinlock (Charles Mirabile) [RHEL-145814]
- spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer (Charles Mirabile) [RHEL-145814]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147267] {CVE-2026-23097}
- ALSA: aloop: Fix racy access at PCM trigger (Jaroslav Kysela) [RHEL-150131] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.4.1.el9_8]" date="1774612800">- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Audra Mitchell) [RHEL-150478] {CVE-2026-23144}
- ixgbevf: add missing negotiate_features op to Hyper-V ops table (CKI Backport Bot) [RHEL-155365]
- libceph: adapt ceph_x_challenge_blob hashing and msgr1 message signing (Ilya Dryomov) [RHEL-155611]
- libceph: add support for CEPH_CRYPTO_AES256KRB5 (Ilya Dryomov) [RHEL-155611]
- libceph: introduce ceph_crypto_key_prepare() (Ilya Dryomov) [RHEL-155611]
- libceph: generalize ceph_x_encrypt_offset() and ceph_x_encrypt_buflen() (Ilya Dryomov) [RHEL-155611]
- libceph: define and enforce CEPH_MAX_KEY_LEN (Ilya Dryomov) [RHEL-155611]
- libceph: Remove unused ceph_crypto_key_encode (Ilya Dryomov) [RHEL-155611]
- redhat/configs: disable CONFIG_CRYPTO_KRB5_SELFTESTS (Ilya Dryomov) [RHEL-155611]
- redhat/configs: enable CONFIG_CRYPTO_KRB5[ENC] (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Fix memory leak in krb5_test_one_prf() (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Fix change to use SG miter to use offset (Ilya Dryomov) [RHEL-155611]
- crypto: krb5 - Use SG miter instead of doing it by hand (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement crypto self-testing (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Camellia enctypes from rfc6803 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc8009 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the AES enctypes from rfc3962 (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 get_mic and verify_mic (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 encrypt and decrypt functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide RFC3961 setkey packaging functions (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement the Kerberos5 rfc3961 key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Provide infrastructure and key derivation (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to perform requests (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to alloc and prepare a crypto object (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add an API to query the layout of the crypto section (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Implement Kerberos crypto core (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Add some constants out of sunrpc headers (Ilya Dryomov) [RHEL-155611]
- crypto/krb5: Test manager data (Ilya Dryomov) [RHEL-155611]
- crypto: Add 'krb5enc' hash and cipher AEAD algorithm (Ilya Dryomov) [RHEL-155611]
- ice: Fix PTP NULL pointer dereference during VSI rebuild (CKI Backport Bot) [RHEL-150246] {CVE-2026-23210}
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154396]
- wifi: mac80211_hwsim: fix typo in frequency notification (CKI Backport Bot) [RHEL-148653] {CVE-2026-23040}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [5.14.0-687.5.1.el9_8]" date="1775044800">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- RDMA/umad: Reject negative data_len in ib_umad_write (CKI Backport Bot) [RHEL-156878] {CVE-2026-23243}
- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154538] {CVE-2025-38109}
- iavf: fix PTP use-after-free during reset (Petr Oros) [RHEL-112567]</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; [5.14.0-687.5.1.el9_8]" date="1776168000">- kabi: enable check-kabi (Čestmír Kalina) [RHEL-153672]
- Set version to 5.14.0-687.5.1.el9_8 (Andrew Lukoshko)
- kabi: add symbols to stablelist (Čestmír Kalina) [RHEL-153672]
- Merge tag 'kernel-5.14.0-687.5.1.el9_8' into main (Patrick Talbert)
- Merge tag 'kernel-5.14.0-687.3.1.el9_8' into main (Patrick Talbert)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168001">- Use AlmaLinux OS secure boot cert
- Debrand for AlmaLinux OS
- Add KVM support for ppc64le
- KVM: PPC: Book3S HV: Make PMU save/restore symbols global for module builds</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.1" date="1776168002">- proc: fix a dentry lock race between release_task and lookup
- hpsa: bring back deprecated PCI ids #CFHack #CFHack2024
- mptsas: bring back deprecated PCI ids #CFHack #CFHack2024
- megaraid_sas: bring back deprecated PCI ids #CFHack #CFHack2024
- qla2xxx: bring back deprecated PCI ids #CFHack #CFHack2024
- qla4xxx: bring back deprecated PCI ids
- lpfc: bring back deprecated PCI ids
- be2iscsi: bring back deprecated PCI ids
- kernel/rh_messages.h: enable all disabled pci devices by moving to
  unmaintained</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.3" date="1779192000">- xfrm: esp: avoid in-place decrypt on shared skb frags (CVE-2026-43284)
- rxrpc: linearize incoming DATA packet when it has paged frags (CVE-2026-43500)
- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (CVE-2026-46300 "Fragnesia")
- ptrace: require CAP_SYS_PTRACE on mm-less tasks (CVE-2026-46333, kABI-safe
  replacement for upstream 31e62c2ebbfd, Qualys Security Advisory)
- crypto: full set of authencesn/algif AEAD Copy-Fail fixes (CVE-2026-31431)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 5.14.0-687.5.4" date="1779969600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers
  (refresh to upstream v5: now also covers skb_segment(); CVE-2026-46300
  "Fragnesia")
- smb: client: reject userspace cifs.spnego descriptions (upstream commit
  3da1fdf4efbc)</changelog>
</package>
<package pkgid="c014f4b19ce537739407c589abc7e60ddcdb504a2ecc8a688917bc3dfef7ed38" name="libpfm-static" arch="aarch64">
  <version epoch="0" ver="4.13.0" rel="5.el9"/>
  <changelog author="Aaron Merey &lt;amerey@redhat.com&gt; - 4.13.0-5" date="1768824000">- Add libpfm-ibm-counters.patch</changelog>
</package>
<package pkgid="a6462ed40df12a140bf7b58ee692206604f28abee27980afd85e9045d5a870f6" name="libpinyin-tools" arch="aarch64">
  <version epoch="0" ver="2.6.0" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 2.3.0-4" date="1595419200">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.4.91-1" date="1598443200">- Update to 2.4.91
- improve full pinyin auto correction
- bug fixes</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.4.92-1" date="1603368000">- Update to 2.4.92
- update pinyin data
- bug fixes</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 2.6.0-1" date="1608033600">- Update to 2.6.0
- bug fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.6.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.6.0-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="085a585a9b2d10a4d894934e3e5dba5b3b25c76de125eada942fe179945ee7c5" name="libpipeline-devel" arch="aarch64">
  <version epoch="0" ver="1.5.3" rel="4.el9"/>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.5.2-1" date="1578484800">- update to 1.5.2
  resolves #1787794</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.5.2-3" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-5" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nikola Forr&#xF3; &lt;nforro@redhat.com&gt; - 1.5.3-1" date="1597665600">- update to 1.5.3
  resolves: #1868648</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b865337d41f7dc0c6eba98dc088e7305680b08182a59413025ef17947ae66b6b" name="libpkgconf-devel" arch="aarch64">
  <version epoch="0" ver="1.7.3" rel="10.el9"/>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-1" date="1596456000">- Update to 1.7.3</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-2" date="1597060800">- Add /usr/local paths to pkg-config(1) search path for non RPM builds</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-3" date="1602763200">- Make /usr/bin/pkg-config multilib safe</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-4" date="1602763201">- Fix pkg-config wrapper for armv7hl</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1.7.3-5" date="1603108800">- Use internal target platform definition for pkg-config wrapper</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.3-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.7.3-7" date="1613995200">- Conditionalize the unit tests, disable them on RHEL 9</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.3-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.7.3-10" date="1633608000">- Don't prepend sysroot_dir if pkg-config file lies outside of sysroot_dir
  resolves: rhbz#1975416</changelog>
</package>
<package pkgid="da4cb0f2c6d0d2719f5ef72674284d9c786e1c6b93b15b3890ab490b54257f84" name="libpng-static" arch="aarch64">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="671ad2aed5af5ccafa1a5b20fe021ebbf9ea5d761199a45408751bb6201e7f1c" name="libpng-static" arch="aarch64">
  <version epoch="2" ver="1.6.37" rel="15.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
</package>
<package pkgid="c9b49479455a738be68c39aadf2e4f981f4cea2ab9ed527033ce16fcb69c9667" name="libpng-tools" arch="aarch64">
  <version epoch="2" ver="1.6.37" rel="15.el9_8.2"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.1" date="1777291200">- fix CVE-2026-33636: out-of-bounds R/W in the palette expansion on ARM Neon (RHEL-161299)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15.2" date="1779796800">- fix CVE-2026-33416: use-after-free via pointer aliasing in png_set_tRNS and png_set_PLTE (RHEL-161448)</changelog>
</package>
<package pkgid="abbf14a017293028126bfc0fc0886120985e85c10f9596018a32d0ecf6fb9cb6" name="libpng-tools" arch="aarch64">
  <version epoch="2" ver="1.6.37" rel="15.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-13" date="1768996800">- CVE-2025-64720: buffer overflow (RHEL-131594)
- CVE-2025-65018: heap buffer overflow (RHEL-131603)
- CVE-2025-66293: out-of-bounds read in png_image_read_composite (RHEL-133294)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-14" date="1771502400">- fix CVE-2026-22801: heap buffer over-read in png_image_write_*bit (RHEL-147356)
- fix CVE-2026-22695: heap buffer over-read in png_image_finish_read (RHEL-149000)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2:1.6.37-15" date="1772539200">- fix CVE-2026-25646: heap buffer overflow in png_set_quantize (RHEL-148411)</changelog>
</package>
<package pkgid="463d9faa8abe9d6906ea4829396676077a286a54083d92d279d1242b9f7eb4d2" name="libpst" arch="aarch64">
  <version epoch="0" ver="0.6.75" rel="12.el9"/>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.6.75-3" date="1590753600">- Rebuilt for Boost 1.73</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0.6.75-4" date="1594900800">- Cleanup conditionals for using python3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.75-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0.6.75-6" date="1595937601">- FTBFS fix: %{__python} must now be explicitly defined</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.6.75-7" date="1611316800">- Rebuilt for Boost 1.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.75-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 0.6.75-9" date="1612267200">- Resolves: #1913613 (Disable DII (and ImageMagic dependency) for RHEL 9)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 0.6.75-11" date="1618920000">- Add patch to correct 'extern "C"' usage</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="556468e3ec409240309df4fab2af08e7ced409ef8ecde2c61053db719956696c" name="libpst-devel" arch="aarch64">
  <version epoch="0" ver="0.6.75" rel="12.el9"/>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.6.75-3" date="1590753600">- Rebuilt for Boost 1.73</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0.6.75-4" date="1594900800">- Cleanup conditionals for using python3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.75-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0.6.75-6" date="1595937601">- FTBFS fix: %{__python} must now be explicitly defined</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.6.75-7" date="1611316800">- Rebuilt for Boost 1.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.75-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 0.6.75-9" date="1612267200">- Resolves: #1913613 (Disable DII (and ImageMagic dependency) for RHEL 9)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 0.6.75-11" date="1618920000">- Add patch to correct 'extern "C"' usage</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="eb98a70c1eae499c5be07293bb07ed00cf287a2891eb26f5ac5ea739b88cb4fa" name="libpst-devel-doc" arch="aarch64">
  <version epoch="0" ver="0.6.75" rel="12.el9"/>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.6.75-3" date="1590753600">- Rebuilt for Boost 1.73</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0.6.75-4" date="1594900800">- Cleanup conditionals for using python3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.75-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0.6.75-6" date="1595937601">- FTBFS fix: %{__python} must now be explicitly defined</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.6.75-7" date="1611316800">- Rebuilt for Boost 1.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.75-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 0.6.75-9" date="1612267200">- Resolves: #1913613 (Disable DII (and ImageMagic dependency) for RHEL 9)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 0.6.75-11" date="1618920000">- Add patch to correct 'extern "C"' usage</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cd95993bc1df37f20a9fc83239e37b8bde8c01fd6a8df21e43ad3534080fc804" name="libpst-doc" arch="aarch64">
  <version epoch="0" ver="0.6.75" rel="12.el9"/>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.6.75-3" date="1590753600">- Rebuilt for Boost 1.73</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0.6.75-4" date="1594900800">- Cleanup conditionals for using python3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.75-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0.6.75-6" date="1595937601">- FTBFS fix: %{__python} must now be explicitly defined</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.6.75-7" date="1611316800">- Rebuilt for Boost 1.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.75-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 0.6.75-9" date="1612267200">- Resolves: #1913613 (Disable DII (and ImageMagic dependency) for RHEL 9)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 0.6.75-11" date="1618920000">- Add patch to correct 'extern "C"' usage</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9cf6a7e70d1749e915fcca2fd18c98049a279fb9943435b7e4ddf0a23f1b751e" name="libqb-tests" arch="aarch64">
  <version epoch="0" ver="2.0.8" rel="1.el9"/>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.3-4" date="1641556800">- Add async connect call for Pacemaker
  Resolves: rhbz#bz2031865</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.3-5" date="1641816000">- Add gating.yaml from RHEL
  Resolves: rhbz#bz2031865</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.3-6" date="1641816001">- Fix gating.yaml for RHEL-9
  Resolves: rhbz#bz2031865</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.3-7" date="1642593600">- Bump soname for async-connect API addition
  Resolves: rhbz#bz2031865</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.3-8" date="1646308800">- Fix negative errno in qb_ipcc_connect (introduced in 2.0.3-4)
  Resolves: rhbz#2057527</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.6-1" date="1650456000">- Rebase to 2.0.6
  Resolves: rhbz#2072903</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.6-1" date="1669896000">- ipc: Retry receiving credentials if the the message is short
  Resolves: rhbz2149647</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.6-3" date="1693569600">- blackbox: fix buffer overflow with long log lines
  Resolves: rhbz#2236171</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.6-4" date="1694174400">- bump rpm version for rhel-exception build
  Resolves: rhbz#2230712</changelog>
  <changelog author="Christine Caulfield &lt;ccaulfie@redhat.com&gt; 2.0.8-1" date="1696420800">- Rebase to 2.0.8
  Resolves: rhbz#2223950</changelog>
</package>
<package pkgid="964aa284ab8eccd3e0953a3ee8bfca35fa171d12556df3da8973e95ca5e2eeb8" name="libqmi-devel" arch="aarch64">
  <version epoch="0" ver="1.32.2" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.26.8-1" date="1610798400">- Update to 1.26.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26.8-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.26.8-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.26.8-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1.30.2-1" date="1631016000">- Update to 1.30.2</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.30.2-2" date="1639569600">- Include libqrtr build dependency (rh #2032807)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.32.2-1" date="1669118400">- Update to 1.32.2</changelog>
</package>
<package pkgid="5cf505491a9321c24eff67cb72150ffffddbf779ada7c80fed60f73e54df9519" name="libqrtr-glib-devel" arch="aarch64">
  <version epoch="0" ver="1.2.2" rel="1.el9"/>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1.0.0-1" date="1618315200">- Initial package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Gris Ge &lt;fge@redhat.com&gt; - 1.0.0-3" date="1636027200">- Import the fedora 35 srpm to CentOS 9 stream.</changelog>
  <changelog author="Gris Ge &lt;fge@rehdat.com&gt; - 1.0.0-4" date="1639051200">- Rebuild with CI gating enabled</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.2.2-1" date="1669118400">- Update to 1.2.2</changelog>
</package>
<package pkgid="61e3057776c5cd2b85d8697d6a26f57241a8f8212e9205ba538c60c8f3eb5a51" name="libqxp-doc" arch="noarch">
  <version epoch="0" ver="0.0.2" rel="11.el9"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.0.2-5" date="1572609600">- Rebuild for ICU 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.0.2-7" date="1589630400">- Rebuild for ICU 67</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.2-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.2-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="91e5ea3ef1dd15ca0065838191c0b63dd2f62b0acdae9a559253cc79424fc968" name="libqxp-tools" arch="aarch64">
  <version epoch="0" ver="0.0.2" rel="11.el9"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.0.2-5" date="1572609600">- Rebuild for ICU 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.0.2-7" date="1589630400">- Rebuild for ICU 67</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.2-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.2-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e467bf20510fc1f966c1d95d423a77a6d090cbbc85e6361d1671cb36cef00449" name="libradosstriper-devel" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b5c4a741053137e5b1fbefea75652c317c2d8f0bf216c00cccbe5f21d91092f1" name="libradosstriper1" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1403533cddee69222ef4a4ad743606f4fce7c12a2f0dd0af0822f1d9ea06bc25" name="libreoffice" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="46771cccdabd2b54af342072a15143310ca0af593ee66e1345d8532e59c83c14" name="libreoffice" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="10c61878487ef924cc5fcb2e14fd44ea99aab34b02f9343fe418b7f6ded523a1" name="libreoffice" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="31ba9d3d5ba9d6cc7075a1bfd9c1818c3d259a83d3346b2dd9805d34444d1c79" name="libreoffice-base" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0cee3f07e2aaa2df0ce2e47fe9638fbb6dd35f69ab680425ac52ef00ea2f1635" name="libreoffice-base" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b825508b151603a34dfbf0a1bf22c2da341a89c9bcdbb79a588f9710c1bc7ba0" name="libreoffice-base" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a82b1cc5187049405ef708359c9e60db908f0abdbc114c60a71489863ce34fb7" name="libreoffice-draw" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="2e3b0ef129f08c1556f0b185ed70b3844e352c47dcd09ad1c78c82c0b577632e" name="libreoffice-draw" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="406a0e60faa1d0112532fa05ef476440898fe624f5f0dd33e03a3e0916ec861b" name="libreoffice-draw" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="67acc7bacd1c76d21dc0175a7d639d9964d33282aff76525e04198930ed73f49" name="libreoffice-emailmerge" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9a7bff787d3288b447973a792117248560ed0177b2708310f61c37207e78741e" name="libreoffice-emailmerge" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="6b19a8c94c37b01767ce9d1f6925d43ec1dcc2a7f26f034e02077308ef1b09c7" name="libreoffice-emailmerge" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="3d17e8d68711d465d15164195d1acee781ebf6df0cbb90ad572801b1129e3655" name="libreoffice-filters" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="19d577a83858971b13801b1a84ffbea6c380888a3cc03d96667ae41681fb0ece" name="libreoffice-filters" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="7f45208ff5d1830fdc0536eb8f10413a93209495a0fdebde601af7d49ac5e662" name="libreoffice-filters" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8c65aa6bf66e3cc6f2bc9f620818b1ea59faa5bf34c90e6667b0ebe1eb9a2467" name="libreoffice-gdb-debug-support" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f0335be4856319a9116101df01f8b74112037403ade8f99733f94b4681dc0739" name="libreoffice-gdb-debug-support" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="367fd1e763638897acb7640140c0f433417ab77e01aae177e3c646ab52312566" name="libreoffice-gdb-debug-support" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="97ee71a3d73c72ea3c500f0e65cfee8512913c16d5ed64f81b6b873f77da958d" name="libreoffice-glade" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b88a8b52775fb2e44f34dd51606ace044a39c013d07f6cc2a97d8a7c1f3af838" name="libreoffice-glade" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e83115da6e995cb2e83df47f49ee1cdff64436d01199e38ffa59e3b1ba4e6da7" name="libreoffice-glade" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b39437d0d954656408ab3d8f69eb822d51fb7b3b5af8878e00f9d9b28af00873" name="libreoffice-gtk3" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="eee7b684fbf675738cbf86fcc7ea0b76810b466183dda2b118aa54214123f60d" name="libreoffice-gtk3" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="dee3c27bea2b4c14ecb111f95564c0abec9069e1b5650d47dfa0749186f3b077" name="libreoffice-gtk3" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1e1fb13dbcd35c25246af70f7d6db6a2ca38d304090d15bff4a4d76c6ab2cb52" name="libreoffice-help-ar" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="feeb55747f9c75b91abd6e917c38e9ff5e325b0870cb85a5ae4118279d796036" name="libreoffice-help-ar" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5d815488cad888ea63ab7f85268571d58371df454bce7f0e98ac946af690fc03" name="libreoffice-help-ar" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ca8535f4a039fec22d00ceede3cf235ad331f918cbabf2c24aceebbaf2beb60f" name="libreoffice-help-bg" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a04ffdace5d21aa0bfcc006d241f85114cc9e4847367cbb8c3206f7a8fdb37db" name="libreoffice-help-bg" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="3f059a9694c6073e5b82e21d8deeee048543bfab6f04882777009fe0b18bd0ae" name="libreoffice-help-bg" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f365d0d192f239ef55817b620fb77eb921c1ac7879222599618ccc663db041d1" name="libreoffice-help-bn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="370c88a3e635d85f5efd01abbd03f774b39ae7506c9818772534e2378444359d" name="libreoffice-help-bn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="97e79b795af84f8356c7665c182aea2604606e711cb35475f0b9aee9269f9e36" name="libreoffice-help-bn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="033a3683a61371cc6493f2701d195695b41e8e87b53ebb98fcac34b30f4a1e7f" name="libreoffice-help-ca" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d1a51459015926d544a8457192a5ee559731d8db379c514b6a3a88e567b17a7b" name="libreoffice-help-ca" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bc16636a69f1085f6899ec19b7a66b0fe6648e5c4b14fc6c20c191a3858bb541" name="libreoffice-help-ca" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="11a2a8c02b12026b1f16f5aeb3edbe31959b387d5e08a6c759df4f2e3741969d" name="libreoffice-help-cs" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="93ed7acc4fff275bd745ee893a0be51c3d22f308396da760b545206214c56b4b" name="libreoffice-help-cs" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="412c4012e3a01d298a79f997149c1653ddfc2b3555115e7bfbeb9c507193ff6b" name="libreoffice-help-cs" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="406462437fb79bcd18063c1d3527cf90368213853d6272c22f553beecdcc033b" name="libreoffice-help-da" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f169ad7b337fe20f306b5818b8a845df8dc0eb2bb5164537f16aa573df2f6fc7" name="libreoffice-help-da" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="be2a335cb4ecea55d376837ccaecac4f9c50bb3fb65ed6233deddcd9da410fa5" name="libreoffice-help-da" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="3d96548297dc39ab22245aeb8ea5a9313093e9a749b713cf55c7c36194c28b5d" name="libreoffice-help-de" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1a48f6d9334475e764070806012f936e913c39ce719bb529b7be1239ea89f750" name="libreoffice-help-de" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="319d0ec5450ef28800d4b8177a1f3e1830f6d9f5998467a258652616e2b9c36f" name="libreoffice-help-de" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1a03031d73a41f95c899d7b68731e029731ebba6ae7d6e5af33854090518fb4d" name="libreoffice-help-dz" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="435043705487fde03965e914fcc310d340b9005e59296671e169fd509c4a5091" name="libreoffice-help-dz" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0e7d68816326edb068ed8b20c4630b6ea6f1edd5f30aff485dc00a200718e916" name="libreoffice-help-dz" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="91c9eb72eff5dcf2cb563e574e99e0b370d64a58f1f3797b2cfded4281b64d67" name="libreoffice-help-el" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="268d8e441b65931c53765fc5e2f23e8330d8e1dd358de64bab1d64fda478ecb3" name="libreoffice-help-el" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d157f84e22ca78648e7b49d2cf5661e3f3bfa4d3698e55bdcf66f80c40102108" name="libreoffice-help-el" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="68d1b45fc714e7ec7274a61cd4f78e3d83b725f7937a876244768ed686893dca" name="libreoffice-help-eo" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5a95a12d8431a0977a3725905f8a05c4b45e7ca43349b8e06a069f6e5f03c54a" name="libreoffice-help-eo" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8efabe8c46a1c2579d80aaee2a6d6477982efc676a647f534f29f2e13958a383" name="libreoffice-help-eo" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f1aac4d05d3490d0c7df0b8b7253eef5b76e1133b63a749fd105fcfb3fa0d737" name="libreoffice-help-es" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="cf4a1f2bfc6c4c03a4785f771a19edc00e8e7843764faf7e40f445f8356562ec" name="libreoffice-help-es" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="38eb8e58e1bf0d68110385db0741e7423eba89e53b2d94476d4d9020ff40fe2f" name="libreoffice-help-es" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ddd16d481f0a5573d466f58a23a522b92c57cc0a9d416227fc06d0a4f2f9bc5f" name="libreoffice-help-et" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="33bb06d3afe2ef6424fa72d89ff9f1f1a1ae3d98d42a472433649ec33b61f6a2" name="libreoffice-help-et" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5bb018d986f2d090af5bd1d20be0c509d25fbc7832b057e90f43200db883eb58" name="libreoffice-help-et" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="05b5149ba9a686f5d305eb21f4afdc93cf78cb459443af0e6e529c712d30f1fe" name="libreoffice-help-eu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="add73c501844d4134dcbd0b3ebed751c281e4537c22819fc38a127be55786bd1" name="libreoffice-help-eu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5ce678ca9594bd7395cd72adb380da08117bb0d61f4bd454f3a13028a64fda72" name="libreoffice-help-eu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1eb5856ecb06549e37de17d44952c528b8f9d08271ed9f405a57feb9d2be0bc3" name="libreoffice-help-fi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="38583cd395e88da6b2177aa6638a78160009323fbd56d2f604dc8daaca3577fb" name="libreoffice-help-fi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c3fea9d9148b77474610e048eb2d88ab823f890d99a1d147489dfdaeb3fe0867" name="libreoffice-help-fi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e9d656c85bc2894322aef85ebe96d1974196f4b44cab751f0af9c7e8fc0ca744" name="libreoffice-help-fr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="18b6507bdd4b8a4d262c3b92e0f62e75e46e32962862b52132f1bdc82ce78685" name="libreoffice-help-fr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="71a1faba933d2b2aa5eef13f67a73dc30a952ac23c12a45ecc841ede2a9bd5d6" name="libreoffice-help-fr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ca2688cb1176296afed38798b0f6ae675c034f31b4143ebe05e38b9ada6201d5" name="libreoffice-help-gl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="91a23212ccba840d8b4a6780455bb83147cf8dc5df32b5471d7a0592020ca16a" name="libreoffice-help-gl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1b717f069a09379a9be4e47317a526ed890e3ffa34b176e5960843ba9d8ec404" name="libreoffice-help-gl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="cdd0fd2fb30fa5f625953f91970e5f00920dff9ffeee3d6f7a6d345c120cea06" name="libreoffice-help-gu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f711f0680ee72a6a0d3fe5f1d95cbc007d48371c54afc6aecf4cbfcba451e6f8" name="libreoffice-help-gu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="93138fb01d5a4341f24bace4d22272968d3b3f6209fdef639135611b45a1ef32" name="libreoffice-help-gu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="141278630e920f17b1361acdbb4837c18c3a52f02d78d76d32419e469032635f" name="libreoffice-help-he" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1ccef165dc160fa99d8f92a2726290fc2c7cb8bb22e58af538f131d6d5548313" name="libreoffice-help-he" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9223daa74ace2c33e634cb32e5a2d4da5626913cd8cb126abb2ee704b421038a" name="libreoffice-help-he" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="928375ed16a40d59333e33dfd44f91d078a98b0f4e4f7271c222fbf24787fb2e" name="libreoffice-help-hi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="99998082ba0422f2a6653960ae516e869f6dc652bb5db169fd1a800e85adf476" name="libreoffice-help-hi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f9b00a27068e1f688d0b5d2d276bb72ad3fd726a80a5a2183b6c6765638b2e15" name="libreoffice-help-hi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="2d441781a8c9643688a2585dbfac19df5b44b392ad5fc9ef83bda986da2b03c5" name="libreoffice-help-hr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="059329b3b878bda5bf42710fc76d18584328c447c454d82ce894760d83fd8884" name="libreoffice-help-hr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="afdaaa9b08a2c5e167564f6de495103014c0d55a21544e35b75ccc0d154ba208" name="libreoffice-help-hr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="12546fa8b2c7490cf1bb2e2d11f42ed20a17576d8a9907c417b506caca90fdde" name="libreoffice-help-hu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="36971def91d664bd7ff0fa75072913d346226849dabdee97ab48a49557bfda5a" name="libreoffice-help-hu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b51bdad27fa59af6d9bd2c57f501b6690b31e0e9f22be5b2cde856959468e2a6" name="libreoffice-help-hu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="360fd5a9c88ef88b1d5ac998348dd60741058dca44f92a3fe445a15a7b1a8b40" name="libreoffice-help-id" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b8407ba9d64d409a8666c29e0aadd126786b5c61db4a8a0a882cd6b9dc3b4c96" name="libreoffice-help-id" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c36bd9c09324e5d8855cc9b602637a2b47d2d6b11b729f83a89170a84671615b" name="libreoffice-help-id" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b668dca2f86e4cef90c772911d3fb4d44dda6644e850561b994ca7203bbe005c" name="libreoffice-help-it" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b92202cb90fdd8f96f6b952338a4fb431eeffae776366c29f698451899355d32" name="libreoffice-help-it" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5f65c7b327a74b4cecdadb1abdf3982be16bc25e8763561cc57bc8d18fbd113c" name="libreoffice-help-it" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1a00410b7adfcaa76bf47e65c5d485e81de01ee4f91143be8492fdc48b6ab806" name="libreoffice-help-ja" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="fe093b60ff4d9c91b1689570d212c6be9505017d5791adae9f690c37af516984" name="libreoffice-help-ja" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d3d6b06b19170b155e319d820c19a41274bd196d00bd938e6036d5322bbba9fc" name="libreoffice-help-ja" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c885b720251de686ee5948049de33c049e719bde0f7d039f16c2c939d86b0033" name="libreoffice-help-ko" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d44717cc694b6e14dc3455e7502030dd5563c06fb3f0f54aa734e053ecae3925" name="libreoffice-help-ko" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1de20049f2ba3275c95c93a24f494019faab3fc0018d1b09339b84868e223aa3" name="libreoffice-help-ko" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="61e612e70bc85244106cd14fb315aac5233457847033b457a40e59e69245bc54" name="libreoffice-help-lt" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="345d242e091deef0b610d8ad9b0e2ae8965ea626296025e2dcb5e3e7efdad4f8" name="libreoffice-help-lt" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1d7745de4e2a70a9b7563f18c0007f40fe323bcc18839ce5ce1ae6f4a4735f32" name="libreoffice-help-lt" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ac51403359e31e44ec049eea5e1d0ef875251e18d996bf24a0d96c4dd523adf4" name="libreoffice-help-lv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="deb3bd05c632613278bffe58c734b08368b1cceccd0437b565eff5fd74e5077a" name="libreoffice-help-lv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8e8966d41a17783cffc7993cf888cac720e98f0ce2d5aeb2d6613170828b2d42" name="libreoffice-help-lv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="973e967af734b5fa6809a6810e00b025e005821cd7d64f88935b18df41803229" name="libreoffice-help-nb" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="077b5ab1f0c5c8dc19e46c961a1c3aa8632e61c836c44a2b6ce010e555c5ba49" name="libreoffice-help-nb" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e7b63368bebee62c384593d2bac800780a2a65e66affe75165cc81e9a911331a" name="libreoffice-help-nb" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ffd789946f36b23aef2f2a0dc09477a9de2be4467f83008fa65f1d6f5096fd4a" name="libreoffice-help-nl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="3f7861070cc794171a5937bbf03dbc7917bfdc89d794df1e2d532e541dc09e52" name="libreoffice-help-nl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e522510c69d66ca0c4e7ec4ab262de2bcd5bfd1f6944e0354afa5216f864cf05" name="libreoffice-help-nl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="274116fdc4d86986bcba31b83bfc0010f33d5bfa50f39f18b4e0d16a581c72e0" name="libreoffice-help-nn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="33136f005376e3669058b0936f1635a7c8a59fdb5bd1fc354221415dcd0efa8b" name="libreoffice-help-nn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f107951337ab7d9279e36609d1649649dc33ba8bd5a40be9c4d9d0ae77e3c971" name="libreoffice-help-nn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="4becdeef0557ceb6b05d4bd74d070fa2b6e68d197f60ccc54c13091a382298d0" name="libreoffice-help-pl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0cc0fe7f9fa362ca4bff0a41f18414df4b53507f0cc1c054cbd3603346b93b7a" name="libreoffice-help-pl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="06487bcf96cdcec85712412ca614a8c220b165c10572c8273e497771ffc3d562" name="libreoffice-help-pl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="038a17038d2d0999aa772abbc82079b1d3cbac9b109ac1f5130cc0cea0dff94d" name="libreoffice-help-pt-BR" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b8fcdebf07280cdda8144ec1d014200d2cc3328b75be72d935e8e3098b14a41b" name="libreoffice-help-pt-BR" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="cf7cdbee54d3fb7fae55980382b6fa1bdec111b4f3adfeafed0f136b9f65ebb9" name="libreoffice-help-pt-BR" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="17d96aacdd6dbb9dd3458636ce4684cc41293769d91b9f5325baba6219e1455e" name="libreoffice-help-pt-PT" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9c11cfb27335931bc06dbb7e44705711d27894c660071f024a450c1ac0bc58bd" name="libreoffice-help-pt-PT" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f249c20939fa4f74ad6c61129749c00bac1a167692838696722d3024287ce337" name="libreoffice-help-pt-PT" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="822af13a97a31cdefd02261c1a19adfba3399e20eadc993caa045eaecd4d6e85" name="libreoffice-help-ro" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="edebea3f7f2771176d335fb18137d5ef621c33f7064b0c7db54fcf475a29f976" name="libreoffice-help-ro" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e899a9b607b165ddfee76a861705a716c0d1eacbeeed913837a168258964cf86" name="libreoffice-help-ro" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a72436be6b53ca9bfb7e2ebffecb1fd639c3d40cf853ce2be77c6fa76097d451" name="libreoffice-help-ru" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d449dc2d93f806071bbd82c75ee253889edae6c39fc6b09b28e95912739fe33d" name="libreoffice-help-ru" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="55ffaeefc015d186474eabf6c8c6ed8d2fb27eb75a99cd690c305f1f90d7844e" name="libreoffice-help-ru" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5e7cecc93a10e034227428365cff87a12e69109138b8dd4a7a87fbfe6a867d7a" name="libreoffice-help-si" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="4e471ed09263831bd9608ea15937e2f53a306a78f1d45d77fd6c823d62aca6b6" name="libreoffice-help-si" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="2e774652be9a7bc0159a6d8a6f5569781866633b8e967a26d9568c909a7ae3f6" name="libreoffice-help-si" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c346c7e009eaaeb8bdf78e578a936b1fca1c07cb75de403efa00a289e6e691ec" name="libreoffice-help-sk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bc5cc83439e4540f0e1ca768b71caccab840a865681fedf13392e91463534379" name="libreoffice-help-sk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e31cac1fe788db710896e16580d4dd3195278f7d88007a79eb0c26794c33ea10" name="libreoffice-help-sk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="61d4f39bb702b656e86734b59e08e756da05bb3d73e8353a1ca7339f2b68ae68" name="libreoffice-help-sl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="6a8b242b038bb4ebf72d95f66da519eced56eaf56869f169b68316bb9aae5bb0" name="libreoffice-help-sl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ca5be01aefa89d2950435c2b8ea997d3b8f76e0576171b82480bec4537bdfccf" name="libreoffice-help-sl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="29e2c840b447990a50cfcfd601398820a9eefe8643fab233c4ada39317636f67" name="libreoffice-help-sv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="fe2ce66072176aa6fb46a70d59cd986997ba0e67e1c4be026d30881ac322f566" name="libreoffice-help-sv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="94100e836eb4e065fd59374485361bf7492f21caa83b811974c4235acd7c393b" name="libreoffice-help-sv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="22d7d77e6a229d4b8aae361acd1f3617d922f2e7e55e142c8ddff649e11989cd" name="libreoffice-help-ta" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="08d1637904b33e97e61025e20cef1fa1133d55a8d3d061a0425545880166aa55" name="libreoffice-help-ta" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b217b882715a359b940e76d5d8d6da09685501b36dccd5c69e517fba36197d03" name="libreoffice-help-ta" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="944c97db295f3c07f49155504953c13e85733bb5d4385b0cbb5cc6cacf3c4401" name="libreoffice-help-tr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="cf648f3fd943a28f07f4e5e4ea1e3549cea5fa7574bd47dbdf7a7a610ce4413d" name="libreoffice-help-tr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b395d15ad3ef0f66e35824ad87732ba2e7e5c4c7f5958c8c476865e03800f24d" name="libreoffice-help-tr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="7fa2865a49769c153709887b4be554365fb7cb730f6c893be723f6285902acc3" name="libreoffice-help-uk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="cc2fdc0b295d18b3c1f8128717d24b3c617efc92c35359c952c23156b86f50a6" name="libreoffice-help-uk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="099d12d30e015a67037b7dc82ae2f48eda1122153de7dd6b4c55ca3df90791bb" name="libreoffice-help-uk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ae73985d32406c24344e39ef2ae6956e0c1dc8594733d777eb9679d911b3ec8e" name="libreoffice-help-zh-Hans" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b22c2e57fca10f5c3e1ce385d352ebe3f9fbed757c648f36e46628d233ca52c0" name="libreoffice-help-zh-Hans" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c5dfc1b5e1a5be76da983cb3df83226b214e2eae623d9628063ef321282a75ca" name="libreoffice-help-zh-Hans" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f4017a44354aa77196a16124d54eb3982f1bf750c23e1f7161fe9d8fa087cda7" name="libreoffice-help-zh-Hant" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="288d2210bfc794cc9c7a21ce6d1f965c830ae4d3f9abcbe2531c7e56e4f433ff" name="libreoffice-help-zh-Hant" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c5f9f3da55e23b1827515de3e6c60af7bced7f7b854082f3c9ab27dda6570bdf" name="libreoffice-help-zh-Hant" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f1f7e3d61d7b63bc6c83a117112b5b850f6bb1e8cfc0eef2b964dd45b643f8fd" name="libreoffice-langpack-af" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8a1a729963d2ff4b069a91e463d1602ed61f2a7a064c66b4bb059a1f8a81898d" name="libreoffice-langpack-af" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="19a95a27cb29abcb4874ca4fcb225d8770edf3ac0f98fc9bc9c29d78ce9f8be2" name="libreoffice-langpack-af" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5088fc7803d1bb6f363510ad11e9a1f55eb5ee53926e7a80f0d374bf8161d8b9" name="libreoffice-langpack-ar" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c14a2d8df7a566c153a59fec876bcd8ee1d85dbfe4ea1c3f63d620fb3c8b1c73" name="libreoffice-langpack-ar" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="994a8ba3e2750fc7cf93ad344ce4840d25e3362bc0a718d97f616bf0fa0e5883" name="libreoffice-langpack-ar" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="30fcdf7c1cd927b666bfb026cdd4fa3ca361ef97d3ef0ef82682560101835e07" name="libreoffice-langpack-as" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8aaed55e48d7554ba267761ddd9864f5690964fb1f4e6e4ce93231da9b4d1a54" name="libreoffice-langpack-as" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a7dd003c3c8f2432b06edb99f06b9c10b086c6325ff032cedcc5d1080006802b" name="libreoffice-langpack-as" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="79750c05455820343cb3aa7b9043b80c1aadfc934017685bdc1a56c6d2b1b0e0" name="libreoffice-langpack-bg" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="abdf4b7ba977a3e3a0cbb93aa968480f7e52d10316cb7e38554d007fc2f5bf90" name="libreoffice-langpack-bg" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bad55c9e79942149a9a15ea09b464a3abd0636359318334590d7d427adb80130" name="libreoffice-langpack-bg" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="7fa4710d3b158104bc3aeed5a4b32a7b7aca01777aeb3d6a2450430f5831edce" name="libreoffice-langpack-bn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ee5cddcf260e0011565155461ee10f50b9e823a6d4b8068e15041c5c9431dab6" name="libreoffice-langpack-bn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="24e8446f5d47bd550572361cd2da0cd76e5d2fe69557a21a563457a05152df9b" name="libreoffice-langpack-bn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bd0a82cc4a1d098cfed4a81075235f11225882ce4728c80ff9706d2138a0b521" name="libreoffice-langpack-br" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ac3e32b38fe4637f1297c925bcef70094f1143c53ab2f10ed63678e94ce053b6" name="libreoffice-langpack-br" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9f4a2774bf8348e1291b2a89f76c75bab0d90279bdea7aadb06b06abd1a75907" name="libreoffice-langpack-br" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="aa7d4679170d66efd63db553af74af6ff9afcc90721a9dc3ca118b64d8d2f9ab" name="libreoffice-langpack-ca" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="969146120ab1cf928fd15d131f4f252e4b1b47ff0600fd4460c9e51b61f951e4" name="libreoffice-langpack-ca" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9972c01d4574b85e2c33170c611dd64d9ea11f5df5e92a9fd6872a1029409878" name="libreoffice-langpack-ca" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="60c903affb87b6a72d2f133b7c990093563ac9c8773976f68ceeb14cc228a7e9" name="libreoffice-langpack-cs" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="559b51feacc6b9d0888c3dad41d5ab8b4aa263d59753d90af8bc39c08c2a66c8" name="libreoffice-langpack-cs" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0ff9518117ce51802dba4495d1ecd57c16ac7c282c4f56f1f4865113a84672d2" name="libreoffice-langpack-cs" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="055b38fd84c0487875fe82af0e8b388339cc216b9617bcae7e8b23a506cd0822" name="libreoffice-langpack-cy" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="41c7f8b17358c18df81236d45de14916eb8fd886c4dd45204ddb0b80934f8347" name="libreoffice-langpack-cy" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="7bfaa9f9839181feb5e9f31fc7a2d7835577b13789e34e3d4f9dc038e0e30a6d" name="libreoffice-langpack-cy" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="7d0ee1ee98ad8fdc4ea92aafe6241fefd054fa27f5b112794d67b6267ea68315" name="libreoffice-langpack-da" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="08106102c28510e520db5baac7d7470876f621d9383dd7f549700e2a5d699ad3" name="libreoffice-langpack-da" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="74e27f1f45a6260e8ecf7984c4d44dd83b2f16649db1769b456fc1df56297e7e" name="libreoffice-langpack-da" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="4ecbe3e7503f391fd13808fb575c56f651eb39923d6b5cac45ae6b56e38be7ed" name="libreoffice-langpack-de" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="caa0e09208da02927bdccd57ce6da023b6ae493c0d42f3750f5001b611d4dec7" name="libreoffice-langpack-de" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="67ea98cc0e75d88869c9d6e135807b8932ccac98bfd7fee93bccd2678bf9ede7" name="libreoffice-langpack-de" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bdb8586dc4f14ba77ec81faa7da6ff2557d0d9de65135fde3f986bdb5491f075" name="libreoffice-langpack-dz" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ba44a937d2273282764fa5dfdfc0d2bbb310dfaeabd9b9a37071a8d5f544ac8b" name="libreoffice-langpack-dz" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="fbc5cfe2266b25dc9fec7db308ab39bb1313be11b9a602bf4c85d58a16e0e8dd" name="libreoffice-langpack-dz" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="4ed8e8799e5689245badcf3794096326c6054820530b04f1d1bb6bc8bf233600" name="libreoffice-langpack-el" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c35536861ea80404fb54127ff18dd99840a6b7d89b17da0a5de5c6f141c624e0" name="libreoffice-langpack-el" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="371d784395ffe0620e391f58bc64d7eab935f4143886c86000b07301ef91cefd" name="libreoffice-langpack-el" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ab382c0021f619ba5b87a41fcda426c17b0fd88da05f6ccf786f0f47047b98a2" name="libreoffice-langpack-eo" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="369a2b24913298efe24ff78c142dcf36cf158963cfe9bcc7f873d3bc0710fe05" name="libreoffice-langpack-eo" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="aaa05db71111460e6138289923d0622623a9a1841a5328285d4dbb0a9aafda45" name="libreoffice-langpack-eo" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0fa6d6c1ee1bc7d7f8871a626f40b46dcadce79d214e2090a3cf05579c7bfdf6" name="libreoffice-langpack-es" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="89c12b7ca0d1561f4fde3f72d1a6bf7afa1b38fc1f67a360f15db3ea72c4ac34" name="libreoffice-langpack-es" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="422bd47b3809d651f2d676f284254dde29e0bdd0e0719aaaa62a25bee7aea175" name="libreoffice-langpack-es" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c160b0ef8c32f17dc8e2da467f20ff753a2e312e59c349464ca8d8a47193e945" name="libreoffice-langpack-et" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="56fd6c57c442be519640aa833586549ca214a14b2871f969428452b89eec2dca" name="libreoffice-langpack-et" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8bee141166aff17717ac5449c389461535feb3ae329ff73560edecebb37340d0" name="libreoffice-langpack-et" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="39dd24ef90cf9b13fb60018cf0375974614ab2c656633802de0f0bc6d1eea82d" name="libreoffice-langpack-eu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="23054e6885c625c8d2bb457a9644732a95d679c3586215ecca84ed66fe249e20" name="libreoffice-langpack-eu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c6ae541ddcdd0ab938ed94b7148ed93f442ce03230497a9fb30eb7c927829930" name="libreoffice-langpack-eu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0272e804b7ad60e2a9d45230cd0c34da6a392bc3c5b50f5e965dd56d0844008f" name="libreoffice-langpack-fa" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1ea0080991b6adf7deff0e2ed58d63f3f2288e9874357889bc7fe10267b35afd" name="libreoffice-langpack-fa" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9c7eea8450a042331b4db32dfa3cb4be17fe7b0d2dfcf1f704f040b0e936bcd4" name="libreoffice-langpack-fa" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0e48cf3beac9eb2a73f0c31aa0a8dc88e5adc168b832d28c6928f5fafbcffdee" name="libreoffice-langpack-fi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1afd7a8a3e74a194c370301389feb5f0b5c889ef1e263b90eb3e04ff6e80f6ac" name="libreoffice-langpack-fi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="22e7de389066bd45d6aa946e143cc66f6094d264bf7f6b427bb166f8f5d39c0c" name="libreoffice-langpack-fi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="450ff943df77d9076d3e343b651ccfb54740286793ca459283c33fa572598293" name="libreoffice-langpack-fr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="3e6eba2569a486c9e006d03f4dd80177d249481838df041040649e6e77b80d90" name="libreoffice-langpack-fr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="eec711fa19b386d73f7b7db50595d8f3a47f25cf913729e7a018e7d9ecc0002a" name="libreoffice-langpack-fr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="cdf9bc3f1a58c548199d04b9b2233b3c4ad35a609ed82a59ec1af00d243d9ffa" name="libreoffice-langpack-fy" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="6623a1e2f4adda86b918ae4176b31be5b545645b9913316f563ccaf3f0cbbc82" name="libreoffice-langpack-fy" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="73fc4a23f81c4613a10b8f42c390d1ee82a63d8c4674b12192e362facdccc377" name="libreoffice-langpack-fy" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d4a3d52244fd774314fa4a53334394c36fc53210b2afd61f311abbceda5420cb" name="libreoffice-langpack-ga" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="59a617acde6b8e7e9a6dc0a9fbc2578938b553f92662205d72969f071d551711" name="libreoffice-langpack-ga" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ae50fdb5c4f3c99cb1c16b229b76deb34def64993d733efd595653d7b44489bb" name="libreoffice-langpack-ga" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0d2f283cd40f74f242cea4b0c5c02df66df9f270827cac17f397a44cfc518003" name="libreoffice-langpack-gl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="765983f19b3c01869f00df3f1b4acbe925a83700f6ba27b26154175f99d40168" name="libreoffice-langpack-gl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0b2f1e8ec8a6557e0bb0d81f078078f3a718943059ee9f8cd711dd3243aebfd0" name="libreoffice-langpack-gl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bf201a9199a8a25ecb0b0ad05caac4b27fe2678eddb2a943b66e01bc5562cac0" name="libreoffice-langpack-gu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="4786821032930391fa9190ad02240377b2942d9dd698ad207c584dacd813f1e5" name="libreoffice-langpack-gu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="65634a9ff99d098303cf74859aa73fe03305cf8be210f3f8d842de74e9cfde95" name="libreoffice-langpack-gu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bf40b7e210bb1b561b3c0a3fa553aae2d92cbdab478569959c1777393db6ca8f" name="libreoffice-langpack-he" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="7b6c28d9a5839da8d23340ba83fa6b362f6c7b254ee090bb809ed2a98947d152" name="libreoffice-langpack-he" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="17bc01be06d91e8b2a1600daeece1d11133edc0d1a2c4f6c53890a0df15ef25b" name="libreoffice-langpack-he" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="65f32efd077369a97c623b7629ddc54e3896c57918958bae4ddadfd7b1e42bdf" name="libreoffice-langpack-hi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bfd213c1174e3b6e3aee85779c4b88473a0a460100b2546bc5f21916d596d065" name="libreoffice-langpack-hi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="74990066ac33ab089ddc1954a6e54cde089684df09cdbd85019b78df65f42bfc" name="libreoffice-langpack-hi" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8629c99fb8ee0a2af100088cb8f8cd8f52c083bbc5a438fa9bbaaa2f01c7906a" name="libreoffice-langpack-hr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="413704eb4fceb586d81aac29698ce6d761c87a76b53011877d74a3c5ef2aa0cb" name="libreoffice-langpack-hr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="695054b742e256022261d45484ae820ff53096eee50a56227bd2ff279118208a" name="libreoffice-langpack-hr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1486aa0a3812466fbb79968849f1dda6ff7927014f2c9b899525b1208bec8047" name="libreoffice-langpack-hu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="78a994cdfd3e809c781426e872b8361026bf72e27abe6dac90b4fcee95f4fe6d" name="libreoffice-langpack-hu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="869bf35ee3e9a6f95337430b24349acac3979006abdd39cff58017ef90026bc0" name="libreoffice-langpack-hu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="dfacb765b73f656cd526f0a0c0197a491eaff11626fd7645d77f1dab562f4f68" name="libreoffice-langpack-id" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="af5a7896b8996b2847e3370c899493e2940abb37d184dc09a51d5cc110e42aca" name="libreoffice-langpack-id" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f9caa1a73423250c50842f27a0f08a7bf2fa3fc06de3c8e2670c6c84cb5e4a6a" name="libreoffice-langpack-id" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="55ef28394fddc5168dcc294d22484c56f6655357932a8f30bd51e9f14d9e806a" name="libreoffice-langpack-it" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0b30d75b2c3f6e1902e01be0f10811a8185482c213c349062b2f5ff88e6e7821" name="libreoffice-langpack-it" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="293512e25f8d607659e697317504aee1b23bac058f0cd4dd34379b9c3adf03e5" name="libreoffice-langpack-it" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="372af823009d8aca498fb6447011d3aee946ac1b4eaffcbda1b6171ddd8f2445" name="libreoffice-langpack-ja" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c35a4ca8da4da02a2bc58be825297e61d5a5d9d5309fec5bb0b654876a2023b5" name="libreoffice-langpack-ja" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="4c6e4febbfd19192b4e7f7baa3c65ccc6dce0000a78cdfd5c68015094ffe881d" name="libreoffice-langpack-ja" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="eafa6cfa8c0eb526e84aa6b56f5688732001e2703f1e708bfdc3983bd0fbafcd" name="libreoffice-langpack-kk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e3baf0b8b81e48c883f4f3cc5a57c0f7d0078cccc177e3e004fa5d7d575b3d11" name="libreoffice-langpack-kk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="3f1f3cb10955818abc389a1f54c770fcc75eac6ca4c0267d74d355b723d0fe0b" name="libreoffice-langpack-kk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="89de611b88a45eaf227e933e7b20a0462cf5844ef55b1cfb07572027368f02f0" name="libreoffice-langpack-kn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="cc119681b3d7b958796970d5197d0ce4a3f911f6cfbab0fda4f4bed4e3ed73c7" name="libreoffice-langpack-kn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a74dac0e48dae663d4bdba62e090e3e9bc07961155d145f6d7708efc4877cabd" name="libreoffice-langpack-kn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0ca1fd30640054e2ad04d4f0cbd07fd2da93bac37b68b6b130792043842f8349" name="libreoffice-langpack-ko" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1afaab8d70e3aee783f06ef45fe47205155fbb655ab5b8471230cff68787f8ee" name="libreoffice-langpack-ko" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="455272b1649237fc7b1a6d4250b01db6910f2a898a06af3f6278fae83fdd3bb9" name="libreoffice-langpack-ko" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c3f2c18e6e2e76e6a7daf12d06bde5530710308618c82b2368cbe788b9d34a4d" name="libreoffice-langpack-lt" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="abd99ecd63f56828e0fe2d95fd99a784237b5b583fe7fcb8c3164c641f81a369" name="libreoffice-langpack-lt" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="3ae09181ad24f3ab67faa57abf6475ea26da9ed68a6c3ea34122594ee4abde5c" name="libreoffice-langpack-lt" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="06c2e153e8d124855a274ef1d1ce56907ff7ea0d03fdc556c08dbc74f6838342" name="libreoffice-langpack-lv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5c788bf20ff6f4111451f3f33439d6db1e1732198156950d16515b93bc004625" name="libreoffice-langpack-lv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1a6ecf48baea48fd71e1029322d82fc3bb6d58153f3e705ee4315359e63dbf04" name="libreoffice-langpack-lv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9963735f3dd8f6626e3aa3fa0b134a73201445c0239e55a02a3ea3b5182ce6bb" name="libreoffice-langpack-mai" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5cccf40e01b443300b86327b1c222be376419c586c901f02e65600549cc96f2f" name="libreoffice-langpack-mai" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="70d3daddf38bc40c5950e1a67733c9ee9696423b495a122fb72931340232cd43" name="libreoffice-langpack-mai" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="fb0be62fa76d0745d18f0305bc34a482e7d05e908eee1252b140d7922a7db3c4" name="libreoffice-langpack-ml" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0615deaff80fcf56e16fe9ffdb9663d3d73e4acc995c65398995bcdb67bfd30f" name="libreoffice-langpack-ml" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8b68fb681900a4e4a0c6784e065752b0897646934484b636391b2d6e2a24ec52" name="libreoffice-langpack-ml" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="62e25c1e5718979d8243c78f5305e3502a9e3cd3c19cc20e9e934263299a1ee5" name="libreoffice-langpack-mr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="7d9d2eb80091ac58ef996ab636f5b5ef665e3e5eb499e04929f37670eb0ed7ca" name="libreoffice-langpack-mr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d0d942413694a342be79015f6226ed91d62f9eaa57e64bb16f8867f0e8abd6e2" name="libreoffice-langpack-mr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="28d31a91f7616e01d8b4a2d746ec8e9e079521d415766da5a582c975f8c1497f" name="libreoffice-langpack-nb" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9c38bd50df63cc66d5fe3a954c5f3c9d65e16e3acd56a3a8ccde73fc609382c3" name="libreoffice-langpack-nb" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="19b243fa9968b99fe6041c23b414d4dbea7ab21b4491a6610e925f994f3679d5" name="libreoffice-langpack-nb" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bd8fdb7126acc41c6bcbc95eb083ac9ccf4ed11fd9967c84349412c5205f127e" name="libreoffice-langpack-nl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="dd5a38f449fbc227ef26a2d1abb060a70c3cdcd7bf24f74c3a35504e379313ab" name="libreoffice-langpack-nl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="69abd48c515c134a206e1a6e2ab6d7c0422fe66002d0d143e1255239c1eba2bb" name="libreoffice-langpack-nl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="91ebbfc95b9746d08cfec6762c6c2fa992970bebda4a1c4e891192efa39500ab" name="libreoffice-langpack-nn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="2de5c4d20b504a093ebf715d1a6b0725b02d8ea62a256ff6d1031c2e058256ec" name="libreoffice-langpack-nn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8c04c09706553bace922e0e7a7952c1b272ffcbe178a1231e518450f94cfb946" name="libreoffice-langpack-nn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f8cc3ff947dc672b4567c55e0ffe816bd631aab291508056385e665b8da8b533" name="libreoffice-langpack-nr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ee9a8d47db199452989e3abb9d3250122417d4fab607c68d52052b77d9a8d3f0" name="libreoffice-langpack-nr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1ecf4990c6a00d2464db9499baafd5ec81954ce589ed85bdd8902d655b944767" name="libreoffice-langpack-nr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="645a88a3853574bae8bc880e00fadbe19683f3c8fe49e6d1aef6a83cbc2a1dd7" name="libreoffice-langpack-nso" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e798d7d4c1bb3dba9d28c7e5a31bc33234978c7ccdb3abda3a42d51991688417" name="libreoffice-langpack-nso" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="821761bb2a3f1c66f3b45e7d9d25d956270bf7699a822269d36e213a80121b71" name="libreoffice-langpack-nso" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e60ea09b248599e82a6e312cbb26904c5c8cc2c10f3becb5fb6d549e48e29f21" name="libreoffice-langpack-or" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="17ab9ea94441c6d05c65e05c0d83062c8515a863a57af4c3ffc1cfab0886d2b3" name="libreoffice-langpack-or" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="00669eff5c093481b3e8c92e48fed2229a6d9cad45ebf55b6e6752b2a15fed41" name="libreoffice-langpack-or" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="2968b48f590b0df8591ec7c7634643b5fd036cfe32903ad1169160169a59f3ec" name="libreoffice-langpack-pa" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="776d51ff26c840c915dab9d794d9fd09870b0ff197b682b14210daadbec9f1e1" name="libreoffice-langpack-pa" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d11aed88d5ebdc472d5cd69d4c5511cb661c8740fd01421e798d26b349d78f3d" name="libreoffice-langpack-pa" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="43c2985764f1ffdf29a6ebd52d15324e72f8379de2c5f52fca445bb24eddd9e1" name="libreoffice-langpack-pl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c2d9b2ab6aa80d733c878ae7613df2334d730a161e9d9f5de8f24211ed12382b" name="libreoffice-langpack-pl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="63bc501b8cc803989094596c59602db592b5f88d479f7b6d37f4b2bde728aeff" name="libreoffice-langpack-pl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9cfb9905bf1d3ac4641547625388063e8bdca0955454a7dc755aee3b26675d60" name="libreoffice-langpack-pt-BR" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="850b24db04ae32471ac5bd740bace392ad4522b1990d1b1f8092ec287cd9c108" name="libreoffice-langpack-pt-BR" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e3a29cdb369475f95a13e0431babf549b21988897f8d62f4ccf280e955bd20d3" name="libreoffice-langpack-pt-BR" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d5b09ac6fd6f3ab8851a054ae10ae555e20fce8517d48da95ffccd3d214a5fea" name="libreoffice-langpack-pt-PT" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="7db901773a4eb76a4273d394b2e65cbb12f194439de95d344fa9f56c0bd29e8f" name="libreoffice-langpack-pt-PT" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="709497051ac89ff10e908cab385d4b6a2736bc401643fa4d13dbe947f76fd9b9" name="libreoffice-langpack-pt-PT" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0881884f74a5afab96f28945570e05ae16a8b5f63de79c251cad413d4b6fbb23" name="libreoffice-langpack-ro" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="db0d51f03d6aea39ca3ec27fd18400d63bf21d3cebf5c838933815972cc2392f" name="libreoffice-langpack-ro" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9017f3554000b787e746b30861573dbf5bbc48eb4dc4526050fab2ab0dfccc2e" name="libreoffice-langpack-ro" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d75935cd065e6f288b46f22c85702d78c43d05044f0eed62f6afed2339a1ee00" name="libreoffice-langpack-ru" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="502c1a2eb7ee36e858133fbd0a9f20f117e488ebf0c5d735fc54cd8ce82aa113" name="libreoffice-langpack-ru" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bd53a67679046b8ba59f837ffa8526057c774009a6a4468375f04813503b5fb0" name="libreoffice-langpack-ru" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e6783ab62710d45673dd3ace51c450a98c5a13aa0f7519a989680c12c4815a99" name="libreoffice-langpack-si" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8a1e89aa772e893a0f9225c6d0e52dd6582d1c8aa45ac7df8d09ac3323725949" name="libreoffice-langpack-si" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="95ac1c17a5359dfdab8b436b53466e33ec2fea3f23c7cf583445464dca156e6f" name="libreoffice-langpack-si" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="4464bc620a0109b5fd73b4624af3a1b57b2f9fa1719791fc8bb2b6762704b7b9" name="libreoffice-langpack-sk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8e6a9e4bccd8e7c6c589852568cc363bb46f785d1e34ec795117e135926f5acf" name="libreoffice-langpack-sk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="fd0ce9f1559ec4f3209633979a495742a9e63a529b6d4952c9489bab3f4a65df" name="libreoffice-langpack-sk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="03f07fa9bd69d26838da228c62e73897aa6b435810e2b2168d4b9be852006b75" name="libreoffice-langpack-sl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="aa4e9cd810b5dfc255792aafbee848e54027bed72a34465781933bfa5633e7d1" name="libreoffice-langpack-sl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="08514000683d31820dee24cc44fad1a0648f3c456548e4b94108b00284f2a955" name="libreoffice-langpack-sl" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8616a19312dc1cef10d3e5ee3a93b9e4a68da387f86fb94a2d548bfa9255be0e" name="libreoffice-langpack-sr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d5d8fb44052ef052c95ac21b2e1862f7dd9874d14db879aae0fc418a89942ef7" name="libreoffice-langpack-sr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="97c5154d9ae2a9b5838b8efccc2e938d1bbcd5f8fa3b6740d07db24bca1f6ca2" name="libreoffice-langpack-sr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="cd18bf7fa7a52c39946b313a20ca654e2ce62fcc7deea8d3de68dfc61bf6b8c0" name="libreoffice-langpack-ss" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d136b9b9763d5f508603c7e5f40a6066a77fde34e058f7ffd773bf7041ba2b30" name="libreoffice-langpack-ss" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="6c1ff1587e73d910ce7312fc82053b3a775dfbd8b9e23c9182f80ab9f97aa601" name="libreoffice-langpack-ss" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="c4989cfbe291d2233b58a066b421b2ffe20d847edc26da962a368efebf2aa43f" name="libreoffice-langpack-st" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="652a2529363272976afad87465af84b3ade1f3c0eef90b3c3b3ffae82c8dd618" name="libreoffice-langpack-st" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="69ce9f32e52738b74307366e0c55859dfadcbcde1e24131b37bfbcdf1f4d3a6e" name="libreoffice-langpack-st" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="184f0bc439116906b62df62165945e827e2bda87f29a31a28357e0dbfa7f3ad8" name="libreoffice-langpack-sv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="8302c804dba20f1da13ca5aa25b44c2491e39bb29dc6e5814353573ffbbf650b" name="libreoffice-langpack-sv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a5203e0cd5739a05e95a53b668867ee29576e3a98886c27f605d980d5e4f7e80" name="libreoffice-langpack-sv" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="26470f61fbc4612d6a36214b0fe9273fcc774ff3305b18ed44ee875580028393" name="libreoffice-langpack-ta" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a73bf9e2084f331b122d04897b440bf387b3e5a1b30f1fcb1d124dd5982fd47c" name="libreoffice-langpack-ta" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bdbec586a8305dbe3570fdc841382d41f1a77eab9db108a91ef7d168371d6f84" name="libreoffice-langpack-ta" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d7c116816b42db45d222e71fe0e9f7daeae17f2752c03ca9c02e72e2b7c247f6" name="libreoffice-langpack-te" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="4bf3af1a030861c1fea2fcda20eeac47dc97523d17ab87d2fa7922c2f7d0b68f" name="libreoffice-langpack-te" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="815e2a1fdb60788b9cd22239cda6f26b220e11c2ef970c472f534eddea3e0a10" name="libreoffice-langpack-te" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b824faa917af1b449f58ede5ebce88acfaa2a22f51c2f61c1c6acee43ea5aa2f" name="libreoffice-langpack-th" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="96781e4e0251f4dcf3851c40dab2eb4a6b9844011768a5be0665e5ff6786f66c" name="libreoffice-langpack-th" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e1795b37acf138ccfe336de6f840013dc1ddc2406140d09f48c9c1dfc76bed77" name="libreoffice-langpack-th" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="fb803df63ae30eb29263c4114ec67d6d44179560497e23049cb2d93406c59d31" name="libreoffice-langpack-tn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="1cf8d3778cd581b78b707ae29bd0828f5bc41b0687cbdbb6ad2cf1421a99d57e" name="libreoffice-langpack-tn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="2e6d6b88157a2d28a1639ed154a3488294e7ec837e8348cc1ed7d37d635bb847" name="libreoffice-langpack-tn" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="4363ce32e402a03b8ad183096ced04326fac1347283292b00d7e24884a087a98" name="libreoffice-langpack-tr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="140b12b0837a3fac3895e7fdf53bdef332c8939f0d7689ee80d1cd34a316c53d" name="libreoffice-langpack-tr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f61e8b725d3818bd28555351ff84f34c9594dc030cf8dfcfa896c293e8963766" name="libreoffice-langpack-tr" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b35387ba400de52f55b95d01b2398549212e2aeac5dcd90ffe10d7aead203c62" name="libreoffice-langpack-ts" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="34b10d9a8118b5d09796e79b0e76ad20c123107902fb9907231405d60dec21d8" name="libreoffice-langpack-ts" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="31c0ce7d2835f42577a29b69e62e54588c65aa0077e65102da436e1357840d2f" name="libreoffice-langpack-ts" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="02c2e2eeead56511839e8fddb94db66fa324b324b7d2018ead311047bba77e45" name="libreoffice-langpack-uk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f5f0f2ea291607854adc20bcf174c7c83badbd70996d1231453f07dc1ef19481" name="libreoffice-langpack-uk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="bb9ec89e8ea5d5efe0bbcfd416e0d148fad6ce2e05899b5634f8972fb23bea80" name="libreoffice-langpack-uk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="17fbf6db0efc6e9e02357735e93090ae97ba71b263d821a1aa5db860640d6f10" name="libreoffice-langpack-ve" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e7b3ebaa1316ba767868567430dc96f81e876476ec869612433f47c4856e124f" name="libreoffice-langpack-ve" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="749a0653ff3737219b0268807db4a350fc709e8158fda22bc3145c8ebe0ae1fc" name="libreoffice-langpack-ve" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="57e860ac33e0354aafb50f72bbf60ca150bca056e0938af62dc6477bd64d7494" name="libreoffice-langpack-xh" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f7f70dee253f76c385a81dd706e8284fc28e4cd623186e0d14ac5a3f2673a33f" name="libreoffice-langpack-xh" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="123777f53c133a9ffd77412b051650f2e459aa15921c23bdeb95f9f6dcd3ff60" name="libreoffice-langpack-xh" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f81a2d0b935a251af16cdca24413be6e9f5f93cfa449cbca69d0a3b61c2127c9" name="libreoffice-langpack-zh-Hans" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="4c0e0c471223a9c004990f915a28187905c12b5d8dcf12730d420507a3ad0e3e" name="libreoffice-langpack-zh-Hans" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f385ade5a013af833c2cdb874ce61d74779b1bccd844d89cb51ac664a4a0ba33" name="libreoffice-langpack-zh-Hans" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="be7843b57cef1ed002ca6c0c2f61db579c25b06b75dfe53e7fdb3d445c166245" name="libreoffice-langpack-zh-Hant" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="43f0169bf0738a3c0f4cdd116fa2eb1259f85dcc83c0ce153cfaf6a19affe093" name="libreoffice-langpack-zh-Hant" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="03b4f00760e61871390099ab411fee693d56eb3661cc1ed5f0ccf9e041d3849e" name="libreoffice-langpack-zh-Hant" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="faafc763a5cb9ec10c497f826be0647c78b15828ddf4f333dd426325e6f1a8d1" name="libreoffice-langpack-zu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="7560da9ab833e99738f0182718f0461c6dc049d4233b3bb9b7094f5e602fa56c" name="libreoffice-langpack-zu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="84639eb7e9a77cc7b31a6fdf609c2ea35906a66098b89e09646a660215d0a254" name="libreoffice-langpack-zu" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="92002bb44ff79753e86449ddbf595cd665d588c2c667666ea4a2cecc22b8f7b2" name="libreoffice-librelogo" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0c94facecaa575814fa6a7fd7e88b27f3e1590d300b8d2ef68b5993d31d8120b" name="libreoffice-librelogo" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ef5278bf476ffbbcf0059cc699ead51954344a1a36dc077f1e023fb0e3702373" name="libreoffice-librelogo" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="3fac1ba590737ff1e17932f1af6192c2fe28a9c9c0232d1f7d311271ca556a44" name="libreoffice-math" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="6f24dbe0751869a755154de67e8ce06a94dc6426c6733c9c3c7abf5abef96db7" name="libreoffice-math" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e5df1a75f6b252cd9c56bc3ec641b07bb49d8e941f564f1ad90e40d8e5e1ac55" name="libreoffice-math" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="6a3f50908d023250f9431bd4407560ed25122006427036e292ea023c188801a8" name="libreoffice-nlpsolver" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5d3f30eb5ccb8644edb6a6abfb2ee2eb2f01a058f07363c9783c5d2ba5b104a4" name="libreoffice-nlpsolver" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f9ae5c18ec820935a4a46b3481f5b1b9b5bdb054293770d9262de1bf908c6265" name="libreoffice-nlpsolver" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f3b99fadf300157cd17643777c2ca0771c370f9a9d0d348112d06687f28c4e1f" name="libreoffice-officebean" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a9af4929140594d0936e60767a24009b25dc8b70ae917c67aceb91d966dfc859" name="libreoffice-officebean" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="ed721d77330f051e1e61bf06f33310e0fc986606eecbe9ca9c508e8c0ae5ab79" name="libreoffice-officebean" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="fc5434d0a4beed8ea62f4545390004ac4b9e998e208a793d176078a37a8e5b21" name="libreoffice-officebean-common" arch="noarch">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0f83e91588f389a6c6479e6af51563e5b675fb57154b0263c4b163c63d4276cf" name="libreoffice-officebean-common" arch="noarch">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="adfe82178232651df6163626967dc945d594bb6425b373de27b240077263b1a7" name="libreoffice-officebean-common" arch="noarch">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a0090a724f8447c806e244bc888296df7fc10736baec5adeb4505e22bc1a7fbb" name="libreoffice-postgresql" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="e582bb180ce8f7fe9ea56ad61544f62269d807edebc622abb44fd7fffb5274cd" name="libreoffice-postgresql" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b253ba22c57754d6c23fd98c933eadfdbdd6ffe77e0a02cfac5d7b54623b8c32" name="libreoffice-postgresql" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="543757d874c87590e603bbf807da5e34f2090dd4d91b79512bedacde1fc16fb1" name="libreoffice-sdk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="dea447c444b395bc6ad2f3c609df27c418cd23a474990c6ade491813b107931c" name="libreoffice-sdk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="cb6ca80e7edb1b0fb76681af9bd55694bd6cd72ec8b0036c6799c6e5a35b507c" name="libreoffice-sdk" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="6a22907762d30574994bbb5a64218cbbe26e90f558db0da086ba01995de51a20" name="libreoffice-sdk-doc" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b74c0e4bab3655763c5830d995635a0b65766fe9a4cdf2d65a14948876b95e0e" name="libreoffice-sdk-doc" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="f457fbe3f5df98168f740b99311a7d0d1ba3388665e0ea6ca608edd7e3038c87" name="libreoffice-sdk-doc" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="57b94a151c482b090f3613f338f5c6bc1c1fe6e34f64b4394b0826574bdda339" name="libreoffice-wiki-publisher" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="100b4a46e7faa58093c41b5a563c28e10922dffdabdc934bd490336d129053f8" name="libreoffice-wiki-publisher" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0be8ca90384c4ceb8e126316a068c0951188c3f98fec748c6b3be048e028770c" name="libreoffice-wiki-publisher" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a323e77539788dfbaf332622578de7f21674f119ea43a1d272be9e7f7499bc97" name="libreoffice-x11" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="b6323aa5b3b5b4ef5dcdc00a4a0d4333c0044d00047981ee79f8edae127dc30b" name="libreoffice-x11" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="6dcec029c01c99508d81a5f9be91bd5cfcbb5c3fe44cbfaf23fd22dc9e81d302" name="libreoffice-x11" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5c1adcde03e77ec9c73f951a722a183dc77b26fc3f1c6c7aee2266386c8e0709" name="libreoffice-xsltfilter" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="2fb34329c8ccd673e9d41d55782864dd17ac0c4ead66255c1138810c35ea79d8" name="libreoffice-xsltfilter" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="5bb05df15876e86c0c9c2d93cff8a1236f691ed48b9908ee035e2b714de98534" name="libreoffice-xsltfilter" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="74cb7a062f54d91ed888bafa9f7158ade1f5ef39606f4358706cabb4ec1db996" name="libreofficekit" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="dd3a7685f7e63d0c94af8166585d1d6419c340d33e9b351a5004f0dd5685a6c6" name="libreofficekit" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="0fbdcd27ef6c5688eb7fc973126abe3c9c9b4ca847d39f381b460dd2ea382552" name="libreofficekit" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a47152a3445aa03b6c66e8c51deeba4542a12d66143853231638fb9e344e5752" name="libreofficekit-devel" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_5.alma.1"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1:7.1.8.1-9" date="1681300800">- Resolves: rhbz#2182392 CVE-2022-38745</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-10" date="1684238400">- Fix erroneous libreoffice-ure dependencies</changelog>
  <changelog author="Stephan Bergmann &lt;sbergman@redhat.com&gt; - 1:7.1.8.1-11" date="1687262400">- Resolves: rhbz#2210193 CVE-2023-0950 Array Index UnderFlow in Calc Formula
  Parsing
- Resolves: rhbz#2210197 CVE-2023-2255 libreoffice: Remote documents loaded
  without prompt via IFrame
- Resolves: rhbz#2208510 CVE-2023-1183 libreoffice: Arbitrary File Write</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-12" date="1709899200">- Fix CVE-2023-6185 escape url passed to gstreamer
- Fix CVE-2023-6186 check link target protocols</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-13" date="1717761600">- Fix CVE-2024-3044 add notify for script use</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.alma.1" date="1743595200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="def62c62e031f79c0f83a1bd05a7d11b44925d60e9bc15d8d6d140eb005dbc1b" name="libreofficekit-devel" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.1.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.1.alma.1" date="1783339200">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9a971eee16e6b84e32e07d296d2608f20b79b21668634d2cc19f1c3b743e39aa" name="libreofficekit-devel" arch="aarch64">
  <version epoch="1" ver="7.1.8.1" rel="15.el9_8.2.alma.1"/>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-14" date="1723723200">- Fix CVE-2024-6472 remove ability to trust not validated macro signatures in
  high security</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1:7.1.8.1-15" date="1741608000">- Fix CVE-2025-1080 Filter out more unwanted command URIs</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.1" date="1779192000">- Fix CVE-2026-4430 Conform AlignEngine parsing to what section 2.3.4.10 of
  the spec has
- Resolves: RHEL-176576</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1:7.1.8.1-15.el9_8.2" date="1782734400">- Fix CVE-2026-8357 Arbitrary code execution via heap buffer overflow in
  formula compilation
- Resolves: RHEL-186062</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1:7.1.8.1-15.2.alma.1" date="1784116800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="6c3e7aeb0fe982224754847aa67af5422586c4e9ad5b29737e5f5c41857fab58" name="libreport-almalinux" arch="aarch64">
  <version epoch="0" ver="2.15.2" rel="6.el9.alma"/>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.14.0-17" date="1611921600">- Drop AnacondaRHEL workflow reference</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-19" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-1" date="1624363201">- New upstream version 2.15.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.2-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-3" date="1639051200">- Rebuild against json-c-0.14-11
  Related: rhbz#2023322</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-4" date="1642420800">- Change the default Bugzilla group
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-5" date="1642420801">- [reporter-bugzilla] Fix subcomponent handling
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-6" date="1642420802">- [reporter-bugzilla] Retry XML-RPC calls
- Resolves: rhbz#2037399</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.15.2-6.alma" date="1649419200">- Add support for AlmaLinux Bug Tracker
- Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla</changelog>
</package>
<package pkgid="0124eab083be5359883b8c95d17a21787d1153e0b37cc9c74eef5fc743ecbc69" name="libreport-devel" arch="aarch64">
  <version epoch="0" ver="2.15.2" rel="6.el9.alma"/>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.14.0-17" date="1611921600">- Drop AnacondaRHEL workflow reference</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-19" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-1" date="1624363201">- New upstream version 2.15.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.2-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-3" date="1639051200">- Rebuild against json-c-0.14-11
  Related: rhbz#2023322</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-4" date="1642420800">- Change the default Bugzilla group
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-5" date="1642420801">- [reporter-bugzilla] Fix subcomponent handling
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-6" date="1642420802">- [reporter-bugzilla] Retry XML-RPC calls
- Resolves: rhbz#2037399</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.15.2-6.alma" date="1649419200">- Add support for AlmaLinux Bug Tracker
- Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla</changelog>
</package>
<package pkgid="d8a5997f816868f46c5d99e22d24fcc5747b5314b21a0052e06b6b364ab1681f" name="libreport-gtk-devel" arch="aarch64">
  <version epoch="0" ver="2.15.2" rel="6.el9.alma"/>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.14.0-17" date="1611921600">- Drop AnacondaRHEL workflow reference</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-19" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-1" date="1624363201">- New upstream version 2.15.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.2-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-3" date="1639051200">- Rebuild against json-c-0.14-11
  Related: rhbz#2023322</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-4" date="1642420800">- Change the default Bugzilla group
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-5" date="1642420801">- [reporter-bugzilla] Fix subcomponent handling
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-6" date="1642420802">- [reporter-bugzilla] Retry XML-RPC calls
- Resolves: rhbz#2037399</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.15.2-6.alma" date="1649419200">- Add support for AlmaLinux Bug Tracker
- Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla</changelog>
</package>
<package pkgid="15253a782c529566206246255bff1eb6123ebbb76994c320c89aebc20c6f0c01" name="libreport-newt" arch="aarch64">
  <version epoch="0" ver="2.15.2" rel="6.el9.alma"/>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.14.0-17" date="1611921600">- Drop AnacondaRHEL workflow reference</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-19" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-1" date="1624363201">- New upstream version 2.15.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.2-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-3" date="1639051200">- Rebuild against json-c-0.14-11
  Related: rhbz#2023322</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-4" date="1642420800">- Change the default Bugzilla group
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-5" date="1642420801">- [reporter-bugzilla] Fix subcomponent handling
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-6" date="1642420802">- [reporter-bugzilla] Retry XML-RPC calls
- Resolves: rhbz#2037399</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.15.2-6.alma" date="1649419200">- Add support for AlmaLinux Bug Tracker
- Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla</changelog>
</package>
<package pkgid="7aea375e31f521c4004ff1b61ec5a5759e1610263b636989ba0cc1511bce608b" name="libreport-plugin-kerneloops" arch="aarch64">
  <version epoch="0" ver="2.15.2" rel="6.el9.alma"/>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.14.0-17" date="1611921600">- Drop AnacondaRHEL workflow reference</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-19" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-1" date="1624363201">- New upstream version 2.15.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.2-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-3" date="1639051200">- Rebuild against json-c-0.14-11
  Related: rhbz#2023322</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-4" date="1642420800">- Change the default Bugzilla group
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-5" date="1642420801">- [reporter-bugzilla] Fix subcomponent handling
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-6" date="1642420802">- [reporter-bugzilla] Retry XML-RPC calls
- Resolves: rhbz#2037399</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.15.2-6.alma" date="1649419200">- Add support for AlmaLinux Bug Tracker
- Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla</changelog>
</package>
<package pkgid="8e7159994350180d3f7a4a3e15a766590f426befa6ac2ed652b5422462fd6160" name="libreport-plugin-logger" arch="aarch64">
  <version epoch="0" ver="2.15.2" rel="6.el9.alma"/>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.14.0-17" date="1611921600">- Drop AnacondaRHEL workflow reference</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-19" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-1" date="1624363201">- New upstream version 2.15.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.2-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-3" date="1639051200">- Rebuild against json-c-0.14-11
  Related: rhbz#2023322</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-4" date="1642420800">- Change the default Bugzilla group
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-5" date="1642420801">- [reporter-bugzilla] Fix subcomponent handling
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-6" date="1642420802">- [reporter-bugzilla] Retry XML-RPC calls
- Resolves: rhbz#2037399</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.15.2-6.alma" date="1649419200">- Add support for AlmaLinux Bug Tracker
- Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla</changelog>
</package>
<package pkgid="3a65454d0705ed4537496ee0dc159d32820cc87baa7fbefe057ff6ac2f57838d" name="libreport-plugin-mailx" arch="aarch64">
  <version epoch="0" ver="2.15.2" rel="6.el9.alma"/>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.14.0-17" date="1611921600">- Drop AnacondaRHEL workflow reference</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-19" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-1" date="1624363201">- New upstream version 2.15.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.2-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-3" date="1639051200">- Rebuild against json-c-0.14-11
  Related: rhbz#2023322</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-4" date="1642420800">- Change the default Bugzilla group
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-5" date="1642420801">- [reporter-bugzilla] Fix subcomponent handling
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-6" date="1642420802">- [reporter-bugzilla] Retry XML-RPC calls
- Resolves: rhbz#2037399</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.15.2-6.alma" date="1649419200">- Add support for AlmaLinux Bug Tracker
- Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla</changelog>
</package>
<package pkgid="16795914eb61f38ef2d874910dcd13ccba8c9accf841f15cd3660ea4185883d5" name="libreport-plugin-mantisbt" arch="aarch64">
  <version epoch="0" ver="2.15.2" rel="6.el9.alma"/>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.14.0-17" date="1611921600">- Drop AnacondaRHEL workflow reference</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-19" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-1" date="1624363201">- New upstream version 2.15.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.2-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-3" date="1639051200">- Rebuild against json-c-0.14-11
  Related: rhbz#2023322</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-4" date="1642420800">- Change the default Bugzilla group
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-5" date="1642420801">- [reporter-bugzilla] Fix subcomponent handling
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-6" date="1642420802">- [reporter-bugzilla] Retry XML-RPC calls
- Resolves: rhbz#2037399</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.15.2-6.alma" date="1649419200">- Add support for AlmaLinux Bug Tracker
- Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla</changelog>
</package>
<package pkgid="c9985bbd85c54feebd6611b7a21d64e1fe16d8cc9efb0578fdc8054c5b9f12e7" name="libreport-plugin-systemd-journal" arch="aarch64">
  <version epoch="0" ver="2.15.2" rel="6.el9.alma"/>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.14.0-17" date="1611921600">- Drop AnacondaRHEL workflow reference</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-19" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-1" date="1624363201">- New upstream version 2.15.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.2-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-3" date="1639051200">- Rebuild against json-c-0.14-11
  Related: rhbz#2023322</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-4" date="1642420800">- Change the default Bugzilla group
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-5" date="1642420801">- [reporter-bugzilla] Fix subcomponent handling
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-6" date="1642420802">- [reporter-bugzilla] Retry XML-RPC calls
- Resolves: rhbz#2037399</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.15.2-6.alma" date="1649419200">- Add support for AlmaLinux Bug Tracker
- Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla</changelog>
</package>
<package pkgid="fdaaa9aeec8000875784c4de381992738d6f84dc92407a9296e139d01a91e66a" name="libreport-plugin-ureport" arch="aarch64">
  <version epoch="0" ver="2.15.2" rel="6.el9.alma"/>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.14.0-17" date="1611921600">- Drop AnacondaRHEL workflow reference</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-19" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-1" date="1624363201">- New upstream version 2.15.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.2-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-3" date="1639051200">- Rebuild against json-c-0.14-11
  Related: rhbz#2023322</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-4" date="1642420800">- Change the default Bugzilla group
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-5" date="1642420801">- [reporter-bugzilla] Fix subcomponent handling
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-6" date="1642420802">- [reporter-bugzilla] Retry XML-RPC calls
- Resolves: rhbz#2037399</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.15.2-6.alma" date="1649419200">- Add support for AlmaLinux Bug Tracker
- Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla</changelog>
</package>
<package pkgid="f30522a989df6915fa3d1579dc7e7888d5edf2bb955d8561a50e7cf392af5224" name="libreport-web-devel" arch="aarch64">
  <version epoch="0" ver="2.15.2" rel="6.el9.alma"/>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.14.0-17" date="1611921600">- Drop AnacondaRHEL workflow reference</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.14.0-19" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-1" date="1624363201">- New upstream version 2.15.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.2-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 2.15.2-3" date="1639051200">- Rebuild against json-c-0.14-11
  Related: rhbz#2023322</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-4" date="1642420800">- Change the default Bugzilla group
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-5" date="1642420801">- [reporter-bugzilla] Fix subcomponent handling
- Resolves: rhbz#2037399</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 2.15.2-6" date="1642420802">- [reporter-bugzilla] Retry XML-RPC calls
- Resolves: rhbz#2037399</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 2.15.2-6.alma" date="1649419200">- Add support for AlmaLinux Bug Tracker
- Remove libreport-rhel-bugzilla and libreport-rhel-anaconda-bugzilla</changelog>
</package>
<package pkgid="a7acd314c1d8a0373571ff12a7d7070b925cf0fa1177d129ce6102b26edd9471" name="librepository" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="31.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-22" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-23" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-24" date="1591790400">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-25" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-26" date="1594987200">- Resolves: rhbz#1858037 disable failing javadoc parts</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-27" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.3-28" date="1610712000">- Remove ant-contrib support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-29" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-30" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951282 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-31" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c088fbf25117e7ad2d178c85e9ac1c37bbc84732c7d0d72960b611e184142e1b" name="librepository-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="31.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-22" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-23" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-24" date="1591790400">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-25" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-26" date="1594987200">- Resolves: rhbz#1858037 disable failing javadoc parts</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-27" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.3-28" date="1610712000">- Remove ant-contrib support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-29" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-30" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951282 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-31" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a1146e0125e5cb4d995fa7f8404106c5098cdc008bedf1786d19cb06d0903b3e" name="librevenge-doc" arch="noarch">
  <version epoch="0" ver="0.0.4" rel="22.el9"/>
  <changelog author="Sergio Durigan Junior &lt;sergiodj@redhat.com&gt; - 0.0.4-16" date="1579262400">- Resolves: rhbz#1786466 Do not use %{?_isa} for GDB dependency.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-17" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.0.4-18" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-19" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-20" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.4-21" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.4-22" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d7782c33714974be7abdd8da0f870f326d3a195c714afa1dfe8590a0de824afa" name="libseccomp-static" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="2.el9"/>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 2.4.2-1" date="1574251200">- New upstream version (#1765314)</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.4.2-2" date="1576497600">- Modernize spec
- Backport fix for missing __SNR_ppoll symbol (#1777889)
- Refresh patch to build on aarch64 with upstream version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.5.0-1" date="1595592000">- New upstream version (#1858965)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 2.5.0-3" date="1596628800">- Apply fixes to change internal handling of the notification fd (#1865802)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.0-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 2.5.2-2" date="1636113600">- fix devel-usability test
- rebase to 2.5.2
  resolves: rhbz#2019887</changelog>
</package>
<package pkgid="baaac149048228534f8aa8903784b1a4f4a32b2ee63d6fd41db7ed92e4dff3f7" name="libsemanage-static" arch="aarch64">
  <version epoch="0" ver="3.6" rel="5.el9_6"/>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.5-2" date="1679486400">- Include more parameters in the module checksum (#2173959)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-0.rc1.1" date="1699876800">- SELinux userspace 3.6-rc1 release</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-1" date="1702468800">- SELinux userspace 3.6 release</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 3.6-2" date="1722945600">- Preserve file context and ownership in policy store (RHEL-31216, RHEL-54389)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-3" date="1731067200">- open lock_file with O_RDWR (RHEL-60503)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-4" date="1738065600">- Set new restorecon handle before doing restorecon (RHEL-76472)</changelog>
  <changelog author="Petr Lautrbach &lt;lautrbach@redhat.com&gt; - 3.6-5" date="1740398400">- improve performance of semanage store rebuild (RHEL-79100)</changelog>
</package>
<package pkgid="5ac4baffb51de95d5299ce51b342fdadbfaf9021f694b2cffbf3d1c5a8aedc16" name="libserf-devel" arch="aarch64">
  <version epoch="0" ver="1.3.9" rel="27.el9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.3.9-27" date="1702641600">- Fix linking of gssapi to support kerberos
- Resolves: RHEL-6802</changelog>
</package>
<package pkgid="e9bc5eaf9ce6dcc2857c67cfda6bc0e168fb7f76971db945358cd4f3884238f4" name="libserializer" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="30.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-23" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.2-24" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.2-25" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-26" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.2-27" date="1610712000">- Remove ant-contrib support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-28" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.2-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951281 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.2-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="665a64a8e43dab2bc490747a8c599e6d1252433f5817b7eb79488c31e36cca66" name="libserializer-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="30.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-23" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.2-24" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.2-25" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-26" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicolas L&#xE9;cureuil &lt;neoclust@mageia.org&gt; - 1.1.2-27" date="1610712000">- Remove ant-contrib support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-28" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.2-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951281 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.2-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="abc081d44a08144f7a29532568f8b8d915316edf2078f987b3df366fdd22446f" name="libshaderc-static" arch="aarch64">
  <version epoch="0" ver="2025.4" rel="1.el9"/>
</package>
<package pkgid="b4792fdbaa3f796b2f90ee1339d6d21f6334615c61dd8089fba7ba47f6f28289" name="libsigsegv-static" arch="aarch64">
  <version epoch="0" ver="2.13" rel="4.el9"/>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 2.11-9" date="1579262400">- Fix configure tests compromised by LTO</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 2.13-1" date="1610884800">- Update to 2.13
- spec file cleanup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.13-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="541a951d76e7a1189b319b27ac58bfc453567b2d9e64073b3bf66671212fde3c" name="libsmi-devel" arch="aarch64">
  <version epoch="0" ver="0.4.8" rel="30.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8-26" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8-27" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8-28" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.8-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.8-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1b7add0e4f501329003d113e7093c25763e2efa9bc41165e449f67070fe89962" name="libsolv-demo" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="4.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-3" date="1712664000">- Some static analysis fixes for unitialized structs
  Resolves: RHEL-25498
- Fix a memory leak in parse_package() of repo conda (RHEL-25496)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
</package>
<package pkgid="18db46524415bb0830bac5fd0ad34cf9ffe60aff981f0803d0352f698d14e07f" name="libsolv-demo" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="a04134d50aa81740be83659204c33f5cef6576224c2f731d75e367ad4c7fa217" name="libsolv-demo" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="562e359a3f218da75cb35048408034af4e54832d092c3051f730f62d88ab14af" name="libsoup-doc" arch="noarch">
  <version epoch="0" ver="2.72.0" rel="16.el9_8.1"/>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.72.0-9" date="1736510400">- Add patches for CVE-2024-52530, CVE-2024-52531, and CVE-2024-52532
  Resolves: RHEL-67069
  Resolves: RHEL-67081</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.72.0-10" date="1738065600">- Enable tests in check, and add patches to fix tests
  Resolves: RHEL-76426</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.72.0-11" date="1746014400">- Backport patches for various CVEs, plus test improvements
  Resolves: RHEL-85909
  Resolves: RHEL-85915
  Resolves: RHEL-85920
  Resolves: RHEL-87058
  Resolves: RHEL-87068
  Resolves: RHEL-87101
  Resolves: RHEL-87119
  Resolves: RHEL-88360
  Resolves: RHEL-88363</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.72.0-12" date="1747828800">- Backport patches for various CVEs
  Resolves: RHEL-84797
  Resolves: RHEL-85888
  Resolves: RHEL-87080
  Resolves: RHEL-92284</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.72.0-13" date="1761825600">- Backport patch for CVE-2025-4945 and CVE-2025-11021</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.72.0-14" date="1767873600">- Backport patch for CVE-2025-14523</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.72.0-15" date="1769774400">- Backport patch for CVE-2026-0719
- Fix NTLM authentication test failures in FIPS mode</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.72.0-16" date="1770033600">- Backport patch for CVE-2026-1761</changelog>
  <changelog author="Michael Catanzaro &lt;mcatanzaro@redhat.com&gt; - 2.72.0-16.1" date="1777896000">- Backport patch for CVE-2026-5119</changelog>
</package>
<package pkgid="18874623807bfecf4b24d6ab9c26e908e5c83599ac352b75bb4c4a9efe977726" name="libspiro-devel" arch="aarch64">
  <version epoch="0" ver="20200505" rel="5.el9"/>
  <changelog author="Kevin Fenzi &lt;kevin@scrye.com&gt; - 20190731-1" date="1566475200">- Update to 20190731. Fixes bug #1742423</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190731-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20200505-1" date="1588766400">- Update to 20200505 version (#1831576)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200505-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200505-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200505-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200505-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b0031aa1252ff095d67847ed1bd7b05784a1403a99acd31c858295d80a61bc7d" name="libsrtp-tools" arch="aarch64">
  <version epoch="0" ver="2.3.0" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.0-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 2.3.0-8" date="1688644800">- fix NSS incompatibility, thanks to George Joseph
  Resolves: rhbz#2211526</changelog>
</package>
<package pkgid="d8a86bb24afd030ed68d37aaf2e07500fe8c4255597619b02eb0fdb1e47fbdac" name="libsss_simpleifp-devel" arch="aarch64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8.1"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
  <changelog author="Justin Stephenson &lt;jstephen@redhat.com&gt; - 2.9.8-5" date="1783512000">- Resolves: RHEL-192063 CVE-2026-14474 sssd: sudo ldap provider searches entire directory tree for sudorole objects by default, enabling privilege escalation
- Resolves: RHEL-192070 CVE-2026-14476 sssd: path traversal in SSSD AD GPO provider allows writing files outside GPO cache directory as root</changelog>
</package>
<package pkgid="6359c7439d2aa122a9f0a385f1e9b600c025aa8016bc00395a1dd2a25cd091bc" name="libsss_simpleifp-devel" arch="aarch64">
  <version epoch="0" ver="2.9.8" rel="4.el9_8"/>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.6-4.2" date="1744027200">- Resolves: RHEL-82419 - Disk cache failure with large db sizes [rhel-9]</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-1" date="1747742400">- Resolves: RHEL-92622 - Rebase SSSD for RHEL 9.7
- Resolves: RHEL-87205 - SSSD fails to connect with ipv4_first when on a machine with only IPv6 and server is dual-stack [rhel-9]
- Resolves: RHEL-73906 - OAuth2 using UPN attribute from Entra ID
- Resolves: RHEL-92590 - SSSD LDAPU1 Mapping braces problem [rhel-9]
- Resolves: RHEL-90136 - backport https://github.com/SSSD/sssd/pull/7649</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-2" date="1749643200">- Related: RHEL-89873 - Rebase Samba to the latest 4.22.x release</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-3" date="1752494400">- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
- Resolves: RHEL-103434 - cache_credentials = true not working</changelog>
  <changelog author="Alexey Tikhonov &lt;atikhono@redhat.com&gt; - 2.9.7-4" date="1755172800">- Related: RHEL-87530 - AD user in external group is not cleared when expiring the cache [rhel-9]
  Patch used to fix this ticket causes a regression (RHEL-106987) and is being reverted.</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.9.7-5" date="1758628800">- Related: RHEL-114548 - Rebase Samba to the latest 4.23.x release</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-1" date="1769083200">- Resolves: RHEL-143692 - SSSD Rebase for RHEL 9.8
- Resolves: RHEL-133967 - Remove SSSD option ipa_enable_dns_sites
- Resolves: RHEL-133469 - 'sssd_nss' hangs when looking up an object by ID that has expired cache entry and filtered out by name 
- Resolves: RHEL-133006 - SSSD: change a default value of 'session_provider' sssd.conf option to 'none'
- Resolves: RHEL-132984 - sssd_be: segfault at 8 ip 00007f6fd25b2b90 sp 00007ffc02dfbae0 error 4 in libsss_ipa.so
- Resolves: RHEL-132506 - RFE: package LDAP provider support for subid ranges
- Resolves: RHEL-120297 - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux
- Resolves: RHEL-87530 - AD user in external group is not cleared when expiring the cache</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-2" date="1775131200">- Resolves: RHEL-150277 - Failed to resolve indirect group-members of nested non-POSIX group</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-3" date="1776081600">- Resolves: RHEL-167758 - sssd-kcm fails to start if krb5_renew_interval is specified</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.9.8-4" date="1776254400">- Resolves: RHEL-154804 Crash in 'sss_client/autofs/sss_autofs.c'</changelog>
</package>
<package pkgid="fb8254f4dfeaf4dd391806f8e2677fff675e7037a6acfbe379aa26775a8b0af1" name="libstaroffice-devel" arch="aarch64">
  <version epoch="0" ver="0.0.7" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.6-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.0.7-1" date="1586088000">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.7-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.7-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="98b7d00cc202fcfe1cb623e60497f15c424b62b69ee980dff9ba94f34adc6e06" name="libstaroffice-doc" arch="noarch">
  <version epoch="0" ver="0.0.7" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.6-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.0.7-1" date="1586088000">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.7-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.7-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ebffdcfb009f563b4dfe2ac2bc38e59fccac16ba3fafd64a28e9134adaba31fe" name="libstaroffice-tools" arch="aarch64">
  <version epoch="0" ver="0.0.7" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.6-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.0.7-1" date="1586088000">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.7-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.7-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3eaf47a92c6d6a108af7cd06786fbe8cad46760c19ca8fed27b3938e9be4f450" name="libsysprof" arch="aarch64">
  <version epoch="0" ver="3.40.1" rel="3.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.90-1" date="1613649600">- Update to 3.39.90</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.90-2" date="1613995200">- Specify pic for static libsysprof-capture</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.92-1" date="1614168000">- Update to 3.39.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.92-2" date="1614168001">- Split sysprof-capture library and header files out to sysprof-capture-devel
- Update minimum required glib2 version</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.94-1" date="1614254400">- Update to 3.39.94</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.94-2" date="1615896000">- Add explicit conflicts to help with upgrades</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.0-1" date="1616414400">- Update to 3.40.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.1-1" date="1616500800">- Update to 3.40.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e9805a7e19ec2f15d3a10d562747bf63fc3607f19790af6af09d8e29bae31cdf" name="libsysprof-ui" arch="aarch64">
  <version epoch="0" ver="3.40.1" rel="3.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.90-1" date="1613649600">- Update to 3.39.90</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.90-2" date="1613995200">- Specify pic for static libsysprof-capture</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.92-1" date="1614168000">- Update to 3.39.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.92-2" date="1614168001">- Split sysprof-capture library and header files out to sysprof-capture-devel
- Update minimum required glib2 version</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.94-1" date="1614254400">- Update to 3.39.94</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.94-2" date="1615896000">- Add explicit conflicts to help with upgrades</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.0-1" date="1616414400">- Update to 3.40.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.1-1" date="1616500800">- Update to 3.40.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="bb0e18f53a97a3170c7c358111a265bdbdc6f7dd1f67504d82011dffcc15b833" name="libteam-devel" arch="aarch64">
  <version epoch="0" ver="1.31" rel="16.el9_1"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-7" date="1623931200">- gating: fix the wrong link of openvswitch for RHEL-9 [1970175]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-8" date="1627473600">- Build util team2bond in teamd rpm [1986788]
- Add some cautions to util team2bond [1986788]
- Add team2bond man doc [1986788]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.31-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-10" date="1629115200">- Remove an extra line in spec file</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-11" date="1636977600">- Revert "teamd: Disregard current state when considering port enablement" [1894546]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-12" date="1646654400">- utils/team2bond: do not add miimon if already exist (rhbz#2060445)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-13" date="1652702400">- utils/team2bond: do not add updelay/downdelay if already exist (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-14" date="1655121600">- Rebuilt with a new version to pass the fixed gating test (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-15" date="1670241600">- teamd: do no remove the ports on shutdown with -N (rhbz#2148854)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-16" date="1670328000">- fix the Requires package name for teamd-devel
- teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)</changelog>
</package>
<package pkgid="799901682b889295d3c4a106a02aecf8e0c4a2a49681da86c06a1e8884d5bfbf" name="libteam-doc" arch="aarch64">
  <version epoch="0" ver="1.31" rel="16.el9_1"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-7" date="1623931200">- gating: fix the wrong link of openvswitch for RHEL-9 [1970175]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-8" date="1627473600">- Build util team2bond in teamd rpm [1986788]
- Add some cautions to util team2bond [1986788]
- Add team2bond man doc [1986788]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.31-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-10" date="1629115200">- Remove an extra line in spec file</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-11" date="1636977600">- Revert "teamd: Disregard current state when considering port enablement" [1894546]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-12" date="1646654400">- utils/team2bond: do not add miimon if already exist (rhbz#2060445)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-13" date="1652702400">- utils/team2bond: do not add updelay/downdelay if already exist (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-14" date="1655121600">- Rebuilt with a new version to pass the fixed gating test (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-15" date="1670241600">- teamd: do no remove the ports on shutdown with -N (rhbz#2148854)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-16" date="1670328000">- fix the Requires package name for teamd-devel
- teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)</changelog>
</package>
<package pkgid="33bb873e44b066807da2051a9805eeae2d68b844692534a3042a99d919798e55" name="libtheora-devel-docs" arch="noarch">
  <version epoch="1" ver="1.1.1" rel="31.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-25" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-26" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-27" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 1:1.1.1-28" date="1596456000">- Use new macros, update config.\* locations</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.1.1-29" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.1.1-30" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.1.1-31" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="af324c5623cb0aa9b728def9f05c323fe45545e2ec47b5f7abcae92c1678edd6" name="libtiff-static" arch="aarch64">
  <version epoch="0" ver="4.4.0" rel="18.el9_8.1"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-13" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-14" date="1745323200">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15" date="1746446400">- backport documentation change for CVE-2023-52355 (RHEL-17328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-16" date="1768737600">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
- fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15.3" date="1778155200">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18" date="1778500800">- rebuild</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18.1" date="1784030400">- fix CVE-2026-12912: heap-buffer-overflow in PixarLog 8BITABGR decode with stride 3 (RHEL-189387)</changelog>
</package>
<package pkgid="40a346ab84b9a239b2f95867355af7767c3e9aff0cd0888b9b620c1b87e257f6" name="libtiff-static" arch="aarch64">
  <version epoch="0" ver="4.4.0" rel="18.el9_8"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-13" date="1724241600">- fix CVE-2024-7006 a null pointer dereference in tif_dirinfo (RHEL-52931)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-14" date="1745323200">- fix CVE-2023-52356: libtiff could crash in TIFFReadRGBATileExt when parsing crafted tiff file (RHEL-17337)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15" date="1746446400">- backport documentation change for CVE-2023-52355 (RHEL-17328)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-16" date="1768737600">- fix CVE-2025-9900: Out-of-Bounds Write in TIFFReadRGBAImageOriented (RHEL-112543)
- fix CVE-2025-8176: use after free in tiffmedian (RHEL-120238)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-15.3" date="1778155200">- fix CVE-2026-4775: signed integer overflow in putcontig8bitYCbCr44tile (RHEL-159331)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 4.4.0-18" date="1778500800">- rebuild</changelog>
</package>
<package pkgid="750f2bc5cb8f863cd25d600127af9f3695b8b6aa0ef0b0dbda0bc3e4d2a6e839" name="libtpms-devel" arch="aarch64">
  <version epoch="0" ver="0.9.1" rel="6.20211126git1ff6fe1f43.el9"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.9.1-4.20211126git1ff6fe1f43" date="1725451200">- Backport "tpm2: Return TPM_RC_VALUE upon decryption failure"
  Resolves: RHEL-58056</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.9.1-5.20211126git1ff6fe1f43" date="1750075200">- Fix CVE-2025-49133
  Resolves: RHEL-96258</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.9.1-6.20211126git1ff6fe1f43" date="1750161600">- Fix CVE-2025-49133 (build for 9.7)
  Resolves: RHEL-96254</changelog>
</package>
<package pkgid="a2c064d9c033b2249faef36f1a0494ecb94293c4cbf9c8595f65090c16289022" name="libtsan-static" arch="aarch64">
  <version epoch="0" ver="11.5.0" rel="14.el9.alma.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 11.5.0-14.alma.1" date="1774872000">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="d0889eb0ec6bfb747a0025805223c0a26d8ee76ae6a6ac1d6a08cbb4638bda98" name="libubsan-static" arch="aarch64">
  <version epoch="0" ver="11.5.0" rel="14.el9.alma.1"/>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-6" date="1747828800">- rs6000: Rework ELFv2 support for -fpatchable-function-entry (PR target/99888,
  RHEL-75806)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-7" date="1748520000">- Fix folding of BIT_NOT_EXPR for POLY_INT_CST (PR 118976, RHEL-90239)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; - 11.5.0-8" date="1750680000">- Sync libstdc++ pretty printers to latest GTS (RHEL-81975)</changelog>
  <changelog author="Siddhesh Poyarekar &lt;siddhesh@redhat.com&gt; 11.5.0-9" date="1751025600">- Pin modification time for python files to SOURCE_DATE_EPOCH (RHEL-100148).</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-10" date="1753790400">- Exception handling performance improvements (RHEL-105072)
- libgcc: Use _dl_find_object to find DWARF data in unwinder
- libgcc: Use lock-free data structures for run-time unwinder registration</changelog>
  <changelog author="Florian Weimer  &lt;fweimer@redhat.com&gt; - 11.5.0-11" date="1753963200">- Adjust glibc32 build dependency (RHEL-105072)</changelog>
  <changelog author="Joseph Myers &lt;josmyers@redhat.com&gt; - 11.5.0-12" date="1757505600">- Add cross compilers for ppc64le and s390x for non-production uses
  (RHEL-94764)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-13" date="1760443200">- Fix testsuite failures when run with -fstack-protector* (PR testsuite/70230,
  RHEL-116477)</changelog>
  <changelog author="David Malcolm &lt;dmalcolm@redhat.com&gt; - 11.5.0-14" date="1761825600">- Add backport of upstream r15-8946-g580664d1b66a5d to gcc 11, adding
  branches and calls to gcov output, but not conditions (RHEL-105416).</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 11.5.0-14.alma.1" date="1774872000">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="9d499bea00df9b1823a4abb61e9647d1da492294699d86166501db2923f68e17" name="libuninameslist-devel" arch="aarch64">
  <version epoch="0" ver="20200413" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20190701-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20200313-1" date="1585137600">- Update to 20200313 version (#1813493)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20200413-1" date="1586952000">- Update to 20200413 version (#1823434)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200413-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200413-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200413-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200413-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="42feb17baef3d06619f395c0fb1976fe5899c88aa624dd3681614d50cd5517e3" name="libusb-tests-examples" arch="aarch64">
  <version epoch="1" ver="0.1.7" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.1.5-16" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 1:0.1.7-1" date="1584187200">- New upstream release 0.1.7 (rhbz#1805154)
- Add tests-examples sub-package and %check</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.1.7-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.1.7-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:0.1.7-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:0.1.7-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5d58581c74f7756f8f60706569cb9dd15ba0be5ac226d7fcac2622409993ba0a" name="libusbx-devel-doc" arch="noarch">
  <version epoch="0" ver="1.0.26" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 1.0.24-1" date="1613044800">- Update to 1.0.24</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.24-2" date="1613476800">- Pull in upstream bugfixes
  Resolves: #1929148</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-1" date="1644494400">- Update to 1.0.25
- Fix a crash after libusb_exit API has been misused
- Add patchset to fix covscan reports
  Resolves: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-2" date="1644926400">- Fix a crash if a transfer outlives closing the device
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-3" date="1646049600">- Updated and new regression fixes
  Resolves: #2058730
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.26" date="1649764800">- Pull in new upstream libusb containing important regression fixes
  Resolves: #2058730
  Resolves: #1938801</changelog>
</package>
<package pkgid="2279ab1693c89c04ecde9e5b0a0638e00c9fcdb381bc4c3b0b6b5c6c6f58a366" name="libusbx-devel-doc" arch="noarch">
  <version epoch="0" ver="1.0.30" rel="1.el9_8"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to upstream version 1.0.30 to include the major bug fixes
- Include the necessary API for fwupd backporting to RHEL9.
  Resolves: RHEL-183213</changelog>
</package>
<package pkgid="0ac634b999da8a588fb4c7cc1c14a14a67b0e8616f7e5f49da4378ca43875e65" name="libusbx-tests-examples" arch="aarch64">
  <version epoch="0" ver="1.0.26" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.23-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Victor Toso &lt;victortoso@redhat.com&gt; - 1.0.24-1" date="1613044800">- Update to 1.0.24</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.24-2" date="1613476800">- Pull in upstream bugfixes
  Resolves: #1929148</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.24-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-1" date="1644494400">- Update to 1.0.25
- Fix a crash after libusb_exit API has been misused
- Add patchset to fix covscan reports
  Resolves: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-2" date="1644926400">- Fix a crash if a transfer outlives closing the device
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.25-3" date="1646049600">- Updated and new regression fixes
  Resolves: #2058730
  Related: #1938801</changelog>
  <changelog author="Benjamin Berg &lt;bberg@redhat.com&gt; - 1.0.26" date="1649764800">- Pull in new upstream libusb containing important regression fixes
  Resolves: #2058730
  Resolves: #1938801</changelog>
</package>
<package pkgid="f5129b33b8c383bd4f34b54ab95e5f18908e0c950f97e1e81cff3a72de30fa98" name="libusbx-tests-examples" arch="aarch64">
  <version epoch="0" ver="1.0.30" rel="1.el9_8"/>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 1.0.30-1" date="1781092800">- Update to upstream version 1.0.30 to include the major bug fixes
- Include the necessary API for fwupd backporting to RHEL9.
  Resolves: RHEL-183213</changelog>
</package>
<package pkgid="9177e9c306b5e23b2dc0e3cf640068b4ec5ef7042bac1f66a12ca3a2ff943d71" name="libuv-static" arch="aarch64">
  <version epoch="1" ver="1.42.0" rel="2.el9_4"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:1.42.0-2" date="1717588800">- Backport fix for CVE-2024-24806
  Resolves: RHEL-24791</changelog>
</package>
<package pkgid="b4b00ab7e45dd94709f381687aa03c7c3acbc5f630997ad429a18da27aa05aa3" name="libvdpau-docs" arch="noarch">
  <version epoch="0" ver="1.5" rel="1.el9"/>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1.4-2" date="1593000000">- Rebuilt</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Nicolas Chauvet &lt;kwizart@gmail.com&gt; - 1.5-1" date="1649851200">- Update to 1.5 - rhbz#2075057</changelog>
</package>
<package pkgid="3c4699507c498a0b5fbb38b3bd0226524a22897de8b248d42251478b096e5990" name="libverto-glib" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11" date="1600171200">- Rebuild for libevent soname bump</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.1-2" date="1611316800">- New upstream version (0.3.1)
- Drop tevent goo and RHEL conditionals</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.2-1" date="1615809600">- New upstream version (0.3.2)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="436450f05b85c040c645086234082241e6724650337d60a18b888864cbb490d5" name="libverto-glib-devel" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11" date="1600171200">- Rebuild for libevent soname bump</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.1-2" date="1611316800">- New upstream version (0.3.1)
- Drop tevent goo and RHEL conditionals</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.2-1" date="1615809600">- New upstream version (0.3.2)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5ef50d3f2a9c99b10e6c90bca76388197c68bccbca438a8e592f053205d1f46d" name="libverto-libev-devel" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11" date="1600171200">- Rebuild for libevent soname bump</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.1-2" date="1611316800">- New upstream version (0.3.1)
- Drop tevent goo and RHEL conditionals</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.2-1" date="1615809600">- New upstream version (0.3.2)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="66864086c487f686577d2f6a8a94149aaad61481e2d17de6e58815a5dee83525" name="libverto-libevent" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11" date="1600171200">- Rebuild for libevent soname bump</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.1-2" date="1611316800">- New upstream version (0.3.1)
- Drop tevent goo and RHEL conditionals</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.2-1" date="1615809600">- New upstream version (0.3.2)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e1f53e880bf93d3d5d4200b6e5563a5e796df8a635f021f934d614794b696413" name="libverto-libevent-devel" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.0-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.0-11" date="1600171200">- Rebuild for libevent soname bump</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.1-2" date="1611316800">- New upstream version (0.3.1)
- Drop tevent goo and RHEL conditionals</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robbie Harwood &lt;rharwood@redhat.com&gt; - 0.3.2-1" date="1615809600">- New upstream version (0.3.2)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.2-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="04d5ef615e2b75e1b47c8893a0a618fd819641030f9416e5243904fe62ac2292" name="libvirt-gconfig" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 4.0.0-1" date="1613390400">- Rebased to 4.0.0 release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="44e595886f0c626722f137942f0d61f625f10c99b57972626a63a1736702bee6" name="libvirt-gconfig-devel" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 4.0.0-1" date="1613390400">- Rebased to 4.0.0 release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="583191f72fcb3a7660328dc340229317ca49254609380226cd9083a6cb77e865" name="libvirt-glib-devel" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 4.0.0-1" date="1613390400">- Rebased to 4.0.0 release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ae669d1c3fa0f8ceb3fac9adb9401ce699647c78a6730f58b9de51830c2342e3" name="libvirt-gobject" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 4.0.0-1" date="1613390400">- Rebased to 4.0.0 release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="078cedb7042f57fa704e4a5f2cf25ff9ac95d1ed41ead233567a97efe39601c3" name="libvirt-gobject-devel" arch="aarch64">
  <version epoch="0" ver="4.0.0" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 4.0.0-1" date="1613390400">- Rebased to 4.0.0 release</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.0.0-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="86474d51847d9c3e8de45e022a6b539d595f795b68ecaab0954f9e449d6ed860" name="libvirt-wireshark" arch="aarch64">
  <version epoch="0" ver="11.10.0" rel="12.1.el9_8.alma.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 11.10.0-12.1.alma.1" date="1782216000">- Enable building for ppc64le</changelog>
</package>
<package pkgid="877b0afaa6ab44181721a6d9a85ffc4be19c162f849e914c4133241cd0e4ca01" name="libvirt-wireshark" arch="aarch64">
  <version epoch="0" ver="11.10.0" rel="12.3.el9_8.alma.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.1.el9_8" date="1773316800">- conf: Parse hyperv features even for host-model (RHEL-151684)
- qemu: Wire up new hyperv host-model mode behavior (RHEL-151684)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.2.el9_8" date="1774612800">- Introduce EXPAND_CPU_FEATURES flag for domain capabilities (RHEL-154552)
- qemu: Implement VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-154552)
- virsh: Add --expand-cpu-features option for domcapabilities (RHEL-154552)
- docs: Clarify host-model description in domain capabilities (RHEL-154552)
- security_apparmor: Use g_auto* in AppArmorSetSecurityHostdevLabel (RHEL-159913)
- security: Cleanup hostdev label error logic (RHEL-159913)
- qemu: Fix IOMMUFD and VFIO security labels (RHEL-159913)
- viriommufd: Set IOMMU_OPTION_RLIMIT_MODE only when running privileged (RHEL-159174)
- conf: Move and rename virStorageSourceFDTuple object (RHEL-159174)
- conf: Refactor virHostdevIsPCIDevice (RHEL-159174)
- hypervisor: Fix virHostdevNeedsVFIO detection (RHEL-159174)
- qemu: Expand call to qemuDomainNeedsVFIO (RHEL-159174)
- qemu: Update qemuDomainNeedsVFIO to ignore PCI hostdev with IOMMUFD (RHEL-159174)
- src: Use virHostdevIsPCIDeviceWith* to check for IOMMUFD (RHEL-159174)
- conf: Introduce domain iommufd element (RHEL-159174)
- qemu: Implement iommufd (RHEL-159174)
- conf: Add iommufd fdgroup support (RHEL-159174)
- qemu: Implement iommufd fdgroup (RHEL-159174)
- tests: Add iommufd fdgroup test (RHEL-159174)
- hypervisor: Call virWaitForDevices() after detaching host devices (RHEL-159174)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12.3.el9_8" date="1780574400">- cpu_conf: Introduce virCPUDefSortFeatures (RHEL-178822)
- qemu_capabilities: Split virQEMUCapsFillDomainCPUCaps (RHEL-178822)
- qemu: Move domain caps flags handling to virQEMUCapsFillDomainCPUHostModel (RHEL-178822)
- qemu_capabilities: Always sort features in host-model CPU (RHEL-178822)
- qemu_capabilities: Use g_autoptr in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Split conditions in virQEMUCapsInitHostCPUModel (RHEL-178822)
- qemu_capabilities: Cache expanded CPU (RHEL-178822)
- domaincapstest: Test EXPAND_CPU_FEATURES flag (RHEL-178822)
- util: Publish and mock virHostCPUGetMSRFromKVM (RHEL-178822)
- cpu_x86: Introduce virCPUx86DataAddMSR (RHEL-178822)
- cpu: Introduce virCPUUpdateFeatures (RHEL-178822)
- Fix documentation of VIR_CONNECT_GET_DOMAIN_CAPABILITIES_EXPAND_CPU_FEATURES (RHEL-178822)
- Introduce VIR_CONNECT_GET_DOMAIN_CAPABILITIES_SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- virsh: Add --supported-cpu-features option for domcapabilities (RHEL-178822)
- domaincapstest: Test SUPPORTED_CPU_FEATURES flag (RHEL-178822)
- qemu_capabilities: Fix domain capabilities on AMD CPUs (RHEL-178822)
- distro: Replace old gating with tmt</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 11.10.0-12.3.alma.1" date="1782475200">- Enable building for ppc64le</changelog>
</package>
<package pkgid="2123b7c20e21bc146aaeed555e4d725f426f285ad0ff45e321513297c33dc582" name="libvirt-wireshark" arch="aarch64">
  <version epoch="0" ver="11.10.0" rel="12.el9_8.alma.1"/>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-4" date="1769688000">- qemuSecurityMoveImageMetadata: Move seclabels only to virStorageSource of same type (RHEL-140624)
- qemuDomainSetThrottleGroup: Enforce non-zero 'groupname' string length (RHEL-144010)
- qemuDomainSetBlockIoTuneField: Move setting of 'group_name' out of the loop (RHEL-144010)
- qemuDomainSetThrottleGroup: Always honour thottle group name passed as argument (RHEL-144010)
- qemuDomainSetThrottleGroup: Don't put group name into the 'tunable' event twice (RHEL-144010)
- qemuSnapshotDiskHasBackingDisk: Avoid call of virStorageSourceIsSameLocation with NULL argument (RHEL-144090)
- qemuSnapshotUpdateBackingStore: Remove stale comment (RHEL-144090)
- qemuSnapshotDiskHasBackingDisk: Use proper 'max_depth' when calling 'virStorageSourceGetMetadata' (RHEL-144090)
- virDomainSnapshotDefAssignExternalNames: Improve error message (RHEL-144090)
- qemuSnapshotUpdateBackingStore: Retry as curent user if qemu-img fails (RHEL-144090)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-5" date="1770206400">- qemublocktest: Iterate all nodenames in 'testQemuDetectBitmaps' (RHEL-145770)
- qemu: monitor: Detect list of bitmaps from 'qcow2' format specific data (RHEL-145770)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Fix check for existing bitmaps (RHEL-145770)
- qemu: migration: Always offer block dirty bitmaps during migration (RHEL-145770)
- qemuMigrationDstPrepareAnyBlockDirtyBitmaps: Always consider offered bitmaps (RHEL-145770)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-6" date="1770379200">- qemu: Implement support for associating iommufd to hostdev (RHEL-126345)
- qemu: Introduce privateData for hostdevs (RHEL-126345)
- qemu: Support per-process memory accounting for iommufd (RHEL-126345)
- qemu: open VFIO FDs from libvirt backend (RHEL-126345)
- qemu: open iommufd FD from libvirt backend (RHEL-126345)
- qemu: Update Cgroup, namespace, and seclabel for iommufd (RHEL-126345)
- tests: qemuxmlconfdata: provide iommufd sample XML and CLI args (RHEL-126345)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-7" date="1770724800">- src: Use device alias when ifname is unset in virDomainInterfaceAddresses() (RHEL-141496)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-8" date="1770811200">- qemu: Ignore cmp_legacy CPU flag (RHEL-146629)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-9" date="1771329600">- qemu: capabilities: Probe properties of 'scsi-block' and 'scsi-generic' devices (RHEL-140614)
- qemu: capabilities: Introduce QEMU_CAPS_DEVICE_SCSI_BLOCK_MIGRATE_PR (RHEL-140614)
- RHEL-ONLY: backport test data for 'migrate-pr' capability of 'scsi-block' (RHEL-140614)
- qemu: Implement support for persistent reservation migration control (RHEL-140614)
- qemu: Extract disk setup done via QMP into a separate helper (RHEL-147866)
- qemu: process: Rename 'qemuProcessSetupDiskThrottling' to 'qemuProcessSetupDisks' (RHEL-147866)
- qemu: monitor: Extract block latency histogram stats into 'qemuBlockStats' (RHEL-147866)
- Expose latency histograms via 'virConnectGetAllDomainStats' (RHEL-147866)
- qemu: monitor: Add handlers for 'block-latency-histogram-set' (RHEL-147866)
- docs: formatdomain: Fix indentation of docs for &lt;disk&gt;&lt;driver&gt;&lt;statistics&gt; element (RHEL-147866)
- docs: formatdomain: Reword section about the '&lt;statistics&gt;' element under disk driver (RHEL-147866)
- Introduce support for disk operation latency histogram collection (RHEL-147866)
- qemu: Setup disk latency histograms on startup/hotplug/update (RHEL-147866)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-10" date="1771416000">- qemu: Introduce QEMU_CAPS_OBJECT_IOMMUFD (RHEL-150353)
- qemu: Move IOMMUFD validation to qemu_validate (RHEL-150353)
- util: Move openning IOMMU device to viriommufd (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenIommuFd (RHEL-150353)
- util: Move openning VFIO device to virpci (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioDeviceFd (RHEL-150353)
- util: Use virPCIDevice as argument in virPCIDeviceGetVfioPath (RHEL-150353)
- conf: Introduce virHostdevIsPCIDeviceWithIOMMUFD (RHEL-150353)
- conf: Introduce virDomainDefHasPCIHostdevWithIOMMUFD (RHEL-150353)
- qemu_domain: Add missing IOMMUFD cleanup (RHEL-150353)
- qemu_process: Fix FD leak with multiple host devices using IOMMUFD (RHEL-150353)
- qemu_process: Refactor qemuProcessOpenVfioFds (RHEL-150353)
- qemuxmlconftest: Refactor host device preparation (RHEL-150353)
- qemuxmlconftest: Rename and refactor testSetupHostdevPrivateData (RHEL-150353)
- qemuxmlconftest: Set fake FD for IOMMUFD (RHEL-150353)
- qemu: Convert IOMMUFD to qemuFDPassDirect (RHEL-150353)
- qemu: Convert vfioDeviceFd to qemuFDPassDirect (RHEL-150353)
- qemu_command: Don't use host property if IOMMUFD is used (RHEL-150353)
- qemu: Save IOMMUFD state into status XML (RHEL-150353)
- qemu_hotplug: Remove iommufd object if no longer needed (RHEL-150353)
- qemu_command: Extract building IOMMUFD props to function (RHEL-150353)
- qemu_hotplug: Add support to hotplug host device with IOMMUFD (RHEL-150353)
- conf: Introduce iommufd enum for domaincaps (RHEL-138544)
- qemu: Fill iommufd domain capability (RHEL-138544)
- tests: properly mock VFIO and IOMMU checks (RHEL-138544)
- iommufd: fix FD leak in case of error (RHEL-150353)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-11" date="1772798400">- domain_conf: initialize network hostdev private data (RHEL-151953)
- qemu_hotplug: enter monitor in order to rollback passed FD (RHEL-151953)</changelog>
  <changelog author="Jiri Denemark &lt;jdenemar@redhat.com&gt; - 11.10.0-12" date="1773144000">- qemu_hotplug: Fix crash when attaching network inteface with hostdev network (RHEL-151953)</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 11.10.0-12.alma.1" date="1774872000">- Enable building for ppc64le</changelog>
</package>
<package pkgid="c8d91b855209d50f47b34b41305039c9b338049c1b3b3db94b032a957fca2e88" name="libvisio-doc" arch="noarch">
  <version epoch="0" ver="0.1.7" rel="9.el9"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.7-1" date="1566043200">- new upstream release</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.7-2" date="1572609600">- Rebuild for ICU 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.7-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.7-4" date="1589630400">- Rebuild for ICU 67</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.7-5" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.7-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.7-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.7-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.7-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4bcd4c454220d4a747946179c2c0bd83de9d50c2a08c9d920dbf9273da42303f" name="libvisio-tools" arch="aarch64">
  <version epoch="0" ver="0.1.7" rel="9.el9"/>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.1.7-1" date="1566043200">- new upstream release</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.7-2" date="1572609600">- Rebuild for ICU 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.7-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.1.7-4" date="1589630400">- Rebuild for ICU 67</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.1.7-5" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.7-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.7-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.7-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.7-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a73fd385964561d376a65a1d5cdfd6e46e1cbc85688ea2a3cf08fbd721b69eb5" name="libvma-devel" arch="aarch64">
  <version epoch="0" ver="9.8.80" rel="4.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.51-1" date="1714392000">- Update to upstream release 9.8.51.
- Resolves: RHEL-24467</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.60-1" date="1730808000">- Update to upstream release 9.8.60.
- Resolves: RHEL-52882</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.71-1" date="1750334400">- Update to upstream release 9.8.71.
- Resolves: RHEL-94446</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.80-1" date="1765368000">- Update to upstream release 9.8.80
- Resolves: RHEL-98267</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.80-2" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98267</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.80-3" date="1767614400">- Rebuilt after updating rdma-core
- Resolves: RHEL-98267</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 9.8.80-4" date="1769169600">- Rebuild for RHEL-9.8
- Resolves: RHEL-98267</changelog>
</package>
<package pkgid="01ca946d6a07d64af102489c5158c497d163f8979b7cc19709c4b54f5f8dd2a7" name="libvpx-utils" arch="aarch64">
  <version epoch="0" ver="1.9.0" rel="10.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.9.0-8" date="1720180800">- Add patch to fix integer overflows.
- Disable LTO to fix build
- Resolves: RHEL-40655</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.9.0-9" date="1748952000">- Add patch for double free
  Resolves: RHEL-93910</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.9.0-10" date="1772712000">- Add patch for superindex full
  Resolves: RHEL-150344</changelog>
</package>
<package pkgid="5214860ec0c932e525f79481b18a5398f23740c6bcc1b7f84129813af5152dac" name="libwebp-java" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="8.el9_3"/>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.2.0-6" date="1683115200">- Add fix for mzbz#1819244
- Fix tools subpackage dependency
- Bump the release to "6" to accommodate the 9.1.0.z release bumps</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 1.2.0-7" date="1683115201">- Bump the release to "7" to accommodate the 9.1.0.z release bumps as
  libwebp-1.2.0-6.el9 &lt; libwebp-1.2.0-6.el9_1</changelog>
  <changelog author="Martin Stransky &lt;stransky@redhat.com&gt; - 1.2.0-8" date="1694779200">- Added fix for CVE-2023-4863</changelog>
</package>
<package pkgid="abea91aa1274accde9192970bdb2d3f44f2ad2cb811abc0c41b455eabc7e1877" name="libwpd-tools" arch="aarch64">
  <version epoch="0" ver="0.10.3" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.3-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.10.3-5" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.3-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jeff Law &lt;law@redhat.com&gt; - 0.10.3-7" date="1604491200">- Fix missing #includes for gcc-11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.3-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.3-9" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.3-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="193809b9d1b23a319a64dd162dee577e2a2333eb1377aeaaa1f75cbb0e546403" name="libwpg-tools" arch="aarch64">
  <version epoch="0" ver="0.3.3" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.3-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.3-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.3-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.3-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.3-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d459708e1382281a59e0fee623d87a7fddaa3a0bdaea8e80d11f1ab1f95eab58" name="libwps-tools" arch="aarch64">
  <version epoch="0" ver="0.4.12" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.10-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.4.11-1" date="1586088000">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.11-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="David Tardon &lt;dtardon@redhat.com&gt; - 0.4.12-1" date="1599393600">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.12-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.12-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.4.12-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="01fbb3a23b70acb303438bdac77b4e83bd7f569daddab452b6f332b71125430f" name="libxcb-doc" arch="noarch">
  <version epoch="0" ver="1.13.1" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1.13.1-6" date="1604575253">- Add BuildRequires for make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.1-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.13.1-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.13.1-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="29849887900070995f15781e2db31d7bf10969c249ac5e43a4db5e9cbe95fbc5" name="libxkbcommon-utils" arch="aarch64">
  <version epoch="0" ver="1.0.3" rel="4.el9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 0.10.0-1" date="1579521600">- libxkbcommon 0.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.0.0-1" date="1599480000">- libxkbcommon 1.0.0</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 1.0.1-1" date="1599825600">- libxkbcommon 1.0.1</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.0.2-1" date="1606132800">- libxkbcommon 1.0.2</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.0.3-1" date="1606219200">- libxkbcommon 1.0.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="350d168d88472b4e1508efec31535438b34d468701ade38ab07377d28d01e492" name="libxml2-static" arch="aarch64">
  <version epoch="0" ver="2.9.13" rel="14.el9_7"/>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 2.9.13-6" date="1714392000">- Fix CVE-2024-25062 (RHEL-29196)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
</package>
<package pkgid="274828ea11343121cb87b016d6d5cfadffced9fbadf8da40a9813e6b0fdfaa04" name="libxml2-static" arch="aarch64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
</package>
<package pkgid="b7f9fa83a317831f81b6ad15dd85b9fbe0669dea527cc007665ff77abcb03b5e" name="libxml2-static" arch="aarch64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.2"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-7" date="1739275200">- Fix CVE-2022-49043 (RHEL-76298)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-8" date="1740484800">- Fix CVE-2024-56171 (RHEL-80127)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
</package>
<package pkgid="7a5be6366696812392868e41a57fe35ea78ac99a1a13fd4a95277f204060a2ae" name="libxml2-static" arch="aarch64">
  <version epoch="0" ver="2.9.13" rel="14.el9_8.4"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-9" date="1740571200">- Fix CVE-2025-24928 (RHEL-80142)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-10" date="1750075200">- Fix CVE-2025-6021 (RHEL-96507)
- Fix CVE-2025-49794 (RHEL-96405)
- Fix CVE-2025-49796 (RHEL-96431)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-11" date="1753099200">- Fix CVE-2025-7425 (RHEL-102806)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-12" date="1754395200">- Fix CVE-2025-32415 (RHEL-100182)
- Fix CVE-2025-32414 (RHEL-99873)</changelog>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 2.9.13-13" date="1762257600">- Fix CVE-2025-9714 (RHEL-119283)</changelog>
  <changelog author="Laura Barcziova &lt;lbarczio@redhat.com&gt; - 2.9.13-14" date="1763035200">- Rebuilt for the correct target in RHEL (9.7-z) (RHEL-119283)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.1" date="1779105600">- Fix CVE-2024-34459 (RHEL-177882)</changelog>
  <changelog author="David King &lt;dking@redhat.com&gt; - 2.9.13-14.2" date="1781611200">- Fix CVE-2025-6170 (RHEL-182016)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.3" date="1785153600">- Fix CVE-2026-6653 (RHEL-215619)</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.9.13-14.4" date="1785153601">- Fix CVE-2026-11979 (RHEL-215568)</changelog>
</package>
<package pkgid="c97388c6c68bf94fa48c017e6270f62db3c51532bf21fa6fcb7dab251accadf8" name="libxmlb-tests" arch="aarch64">
  <version epoch="0" ver="0.3.24" rel="1.el9"/>
  <changelog author="RHEL Packaging Agent &lt;jotnar@redhat.com&gt; - 0.3.24-1" date="1758888000">- Rebase to 0.3.24
- Add missing libzstd-devel BuildRequires
- Add missing files to the %files tests section
- Resolves: RHEL-116442</changelog>
</package>
<package pkgid="6ddbd9d416395d19f14035e54a784d03fd65c8a18754a17e5a2f70ae1220508c" name="libzmf-doc" arch="noarch">
  <version epoch="0" ver="0.0.2" rel="18.el9"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.0.2-11" date="1572609600">- Rebuild for ICU 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-12" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.0.2-13" date="1589630400">- Rebuild for ICU 67</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.0.2-14" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-15" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-16" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.2-17" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.2-18" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="58739124ac7ff82b632d4ab0894038992b12e98d82dbb420b42e109d22d06e1c" name="libzmf-tools" arch="aarch64">
  <version epoch="0" ver="0.0.2" rel="18.el9"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.0.2-11" date="1572609600">- Rebuild for ICU 65</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-12" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 0.0.2-13" date="1589630400">- Rebuild for ICU 67</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.0.2-14" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-15" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.2-16" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.2-17" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.2-18" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6fc78e124cb560866dafef78b7d646b18954eebc43a7ac864e20804a500054f2" name="libzstd-static" arch="aarch64">
  <version epoch="0" ver="1.5.5" rel="1.el9"/>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.5.5-1" date="1730462400">- Rebase to 1.5.5
  Resolves: RHEL-62221</changelog>
</package>
<package pkgid="96bd9752608377e80287427ec0dfe862e1b1398f6599d5497c0830ac30892554" name="liquidio-firmware" arch="noarch">
  <version epoch="0" ver="20260411" rel="155.5.el9_7"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250314-151" date="1741953600">- accel: ivpu: Update firmware for NPU (RHEL-38587)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw88: Add firmware v33.6.0 for RTL8814AE/RTL8814AU
- rtw89: 8922a: update fw to v0.35.64.0
- rtw89: 8922a: update fw to v0.35.63.0
- rtw89: 8852c: update fw to v0.27.125.0
- iwlwifi: add Bz/gl FW for core94-91 release
- iwlwifi: update ty/So/Ma firmwares for core94-91 release
- iwlwifi: update cc/Qu/QuZ firmwares for core94-91 release
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update gc 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vcn 3.1.2 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update navi10 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update gc 10.3.7 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- qcom: Update gpu firmwares for qcs8300 chipset
- linux-firmware: add firmware for qat_420xx devices
- amdgpu: DMCUB updates for various ASICs
- i915: Update Xe3LPD DMC to v2.20
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250305133215
- mediatek MT7920: update bluetooth firmware to 20250210151502
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- intel_vpu: Add firmware for 37xx and 40xx NPUs
- QCA: Add Bluetooth firmwares for QCA2066 with USB transport
- QCA: Add two bluetooth firmware nvm files for QCA2066
- QCA: Update Bluetooth QCA2066 firmware to 2.1.0-00653
- QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00653
- cirrus: cs35l41: Add firmware and tuning for ASUS Consumer laptops
- cirrus: cs35l41: Add Firmware for various ASUS Commercial laptops
- ASoC: tas2781: Update dsp firmware for Gemtree project
- xe: Update GUC to v70.40.2 for BMG, LNL
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DCUB update for DCN401 and DCN315
- cirrus: cs35l41: Add firmware and tunings for CS35L41 driver for Steam Deck
- ath11k: QCN9074 hw1.0: update to WLAN.HK.2.9.0.1-02175-QCAHKSWPL_SILICONZ-2
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04604-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA6698AQ hw2.1: update board-2.bin
- rtw89: 8852bt: update fw to v0.29.122.0 and BB parameter to 07
- linux-firmware: Update AMD SEV firmware
- linux-firmware: update firmware for MT7920 WiFi device
- qca: update WCN3988 firmware
- amdgpu: Update ISP FW for isp v4.1.1
- qcom: add firmware for Adreno A225
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for two HP laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Add and update firmware for Cirrus CS35L56 for various Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- i915: Update Xe3LPD DMC to v2.17
- ASoC: tas2781: Change regbin firmwares for single device
Resolves: RHEL-38587</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="c85c43d77d5e5c85cefa02941aa591efc1f63a34baa7e231176a58d0cd36f954" name="liquidio-firmware" arch="noarch">
  <version epoch="0" ver="20260609" rel="161.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250513-152" date="1747224000">- Update linux-firmware to latest upstream (RHEL-87565)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel_vpu: Update NPU firmware
- intel: avs: Update topology file for Digital Microphone Array
- amdgpu: updates for dcn 3.20 and dcn 4.01 firmware to 0.1.10.0
- linux-firmware: Amphion: Update vpu firmware
- amd_pmf: Update AMD PMF TA Firmware to v3.1
- amdgpu: update dcn 4.01 firmware to 0.1.8.0
- qcom: Add link for SM8350 GPU firmware
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Add firmware for Cirrus Amps for some ASUS laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Dell laptops
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250425073330
- rtw89: 8852c: add tables for dynamic antenna TXPWR
- rtw89: 8922a: update fw to v0.35.71.0
- brcm: Add NVRAM file for Radxa Rock Pi X mini PC
- i915: Update Xe3LPD DMC to v2.23
- rtl_bt: Update RTL8852B BT USB FW to 0x098B_154B
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: IPQ5018 hw1.0: update to WLAN.HK.2.6.0.1-01300-QCAHKSWPL_SILICONZ-1
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- ath12k: QCN9274 hw2.0: update board-2.bin
- qcom: vpu: update video firmware binary for SA8775p
- iwlwifi: add Bz/gl FW for core95-82 release
- iwlwifi: update ty/So/Ma firmwares for core95-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core95-82 release
- iwlwifi: add Bz-hr FW for core93-123 release
- qcom: add QUPv3 firmware for QCS9100 platform
- ASoC: tas2781: Swap channel for SPI projects.
- bmi260: Add BMI260 IMU initial configuration data file
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x1881_BA06
- rtw89: 8922a: update element RF TXPWR to R40
- rtw89: 8852c: update element RF TXPWR to R78
- rtw89: 8852c: add fw v0.27.125.0 with format version 2
- Revert "rtw89: 8852c: update fw to v0.27.125.0"
- qcom: vpu: add video firmware binary for qcm6490
- contrib: process_linux_firmware: set user agent
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update psp 14.0.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update psp 13.0.4 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update yellow carp firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vega20 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update vega10 firmware
- amdgpu: update psp 13.0.5 firmware
- amdgpu: update navi12 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update picasso firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update arcturus firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige goby firmware
- amdgpu: update psp 13.0.8 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: update dcn 4.01 frmware to 0.1.6.0
- intel: ish: Update license file for ISH
- intel: avs: Update topology file for I2S Analog Devices 4567
- intel: avs: Update topology file for I2S Realtek 5663
- intel: avs: Update topology file for I2S Realtek 5640
- intel: avs: Update topology file for I2S Realtek 5514
- intel: avs: Update topology file for I2S Realtek 298
- intel: avs: Update topology file for I2S Realtek 286
- intel: avs: Update topology file for I2S Realtek 274
- intel: avs: Update topology file for I2S Nuvoton 8825
- intel: avs: Update topology file for I2S Maxim 98927
- intel: avs: Update topology file for I2S Maxim 98373
- intel: avs: Update topology file for I2S Maxim 98357a
- intel: avs: Update topology file for HDAudio codecs
- intel: avs: Update topology file for HDMI codecs
- intel: avs: Update topology file for Digital Microphone Array
- intel: avs: Update topology file for I2S Dialog 7219
- xe: Update GUC to v70.44.1 for BMG and LNL
- i915: Update GUC to v70.44.1 for i915 platforms
- qcom:x1e80100: Iris Support for Lenovo T14s G6 Qualcomm platform
- qcom:x1e80100: Support for Lenovo Yoga Slim 7 Snapdragon platform
- Mellanox: Add new mlxsw_spectrum firmware xx.2014.4012
- linux-firmware: add firmware for Aeonsemi AS21x1x 1G/2.5G/5G/10G Ethernet Phy
- QCA: Add 8 bluetooth nvm files for WCN785x btusb
- QCA: Update WCN785x btusb firmware to 2.0.0-00790-3
- qcom: update firmware binary for SM8250
- mediatek: Add new mt8195 SOF firmware
- mediatek: Add new mt8188 SOF firmware
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x17E9_16ED
- Revert "rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6"
- intel_vpu: Update NPU firmware
- cirrus: cs35l56: Correct filenames of SSID 103c8e1b and 103c8e1c
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x0471_70A6
- amdgpu: update dcn 3.5 and dcn 3.5.1 firmware to 9.0.27.0
- amdgpu: update dcn 3.1.4 firmware to 8.0.78.0
- amdgpu: update dcn 4.01 firmware to 0.1.3.0
- amdgpu: update dcn 3.5 firmware to 0.1.0.0
- cirrus: cs35l41: Add Firmware for various HP Laptops using CS35L41 HDA
- cirrus: Add cs35l56 firmware symlinks for Asus UM5606KA
- qcom: Add DSP firmware for QCS8300 platform
- mediatek: Add MT8188 SCP firmware
- copy-firmware: fail gracefully if moreutils parallel is installed
- copy-firmware: make script smarter about bad parameters
- copy-firmware: add usage help text
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: Add Audio firmware for Lenovo Slim 7x
- qcom: Add Audio firmware for Lenovo T14s
- amdgpu: DMCUB updates for various ASICs
Resolves: RHEL-87565</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="11ba227cc9284107c78908304d1e6c851024f99385527d3eb0553ba8a957eef0" name="liquidio-firmware" arch="noarch">
  <version epoch="0" ver="20260707" rel="161.1.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250604-153" date="1749038400">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- xe: Update GUC to v70.45.2 for BMG, LNL
- i915: Update GUC to v70.45.2 for DG2
- xe: Update LNL GSC to v104.0.5.1429
- amdgpu: DMCUB updates for various ASICs
- qcom: add QUPv3 firmware for QCS8300 platform
- Intel IPU7: Add firmware binary files
- ice: update wireless_edge package to 1.3.23.0
- ice: update comms package to 1.3.55.0
- ice: update package to 1.3.43.0
- linux-firmware: Update firmware file for Intel Pulsar core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel Quasar core
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- iwlwifi: add Bz/gl FW for core96-76 release
- iwlwifi: update ty/So/Ma firmwares for core96-76 release
- iwlwifi: update cc/Qu/QuZ firmwares for core96-76 release
- iwlwifi: update firmwares for 8000 series
- iwlwifi: update 7265D firmware
- mediatek MT7925: update bluetooth firmware to 20250526153203
- linux-firmware: update firmware for MT7925 WiFi device
- qcom: sc8280xp: FW blob updates for X13s
- brcm: Add symlinks for Khadas VIM SDIO wifi config to AW-CM256SM.txt
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00284.1-QCAHMTSWPL_V1.0_V2.0_SILICONZ-3
- cirrus: cs35l41: Fix firmware links for several ASUS laptops
- cirrus: cs35l41: Add Firmware for various HP Agusta Laptops using CS35L41 HDA
- Adjust QUPv3 driver name
- cnm: Add Chips&amp;Media wave633c firmware for NXP i.MX9
- qcom: add QUPv3 firmware for QCM6490 platform
- mediatek: Add mt8196 VCP firmware
- cirrus: cs35l41: Add Firmware for various ACER Laptops using CS35L41 HDA
- nvidia: add GSP-RM version 570.144 firmware images
- amdgpu: DMCUB updates for various ASICs
- powervr: add firmware for Imagination Technologies BXS-4-64 GPU
- rtl_bt: Update RTL8822C BT USB and UART firmware to 0x7C20
- brcmfmac: Add a couple of NanoPi devices
- rtl_nic: add firmware rtl8127a-1
- cnm: update chips&amp;media wave521c firmware.
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="47031a66cf70356f3e1e3d465a71a7a59bf6f79d9ceb7aa6338d23993516105a" name="liquidio-firmware" arch="noarch">
  <version epoch="0" ver="20260804" rel="161.2.el9_8"/>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250716-154" date="1752667200">- Update linux-firmware to latest upstream (RHEL-95338)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtw89: 8852b: update fw to v0.29.128.0
- rtw89: 8852bt: update fw to v0.29.127.0
- rtw89: 8922a: add regd fw element with version R72-R6
- rtw89: 8852c: add regd fw element with version R72-R57
- rtw89: 8922a: update BB parameter V49
- qcom: Update gpu firmwares of QCS615 chipset
- linux-firmware: Update firmware file for Intel Solar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- xe: Add fan_control v203.0.0.0 for BMG
- linux-firmware: Update AMD cpu microcode
- amdgpu: Add DCN 3.6
- amdgpu: Add PSP 14.0.5
- amdgpu: Add SDMA 6.1.3
- amdgpu: Add GC 11.5.3
- mediatek MT7921: update bluetooth firmware to 20250625154126
- qcom/adreno: document firmware revisions
- qcom/adreno: move A610 and A702 ZAP files to Adreno driver section
- qcom: Add sdx61 Foxconn vendor firmware image file
- Revert "linux-firmware: Update firmware file for Intel Pulsar core"
- qcom/adreno: sort entries in WHENCE
- xe: First HuC release for Pantherlake
- xe: First GuC release for Pantherlake
- linux-firmware: update firmware for MT7921 WiFi device
- rtw89: 8922a: update fw to v0.35.80.0
- rtw89: 8852c: update fw to v0.27.129.1
- rtw89: 8852c: update fw to v0.27.128.0
- WHENCE: extract license texts
- WHENCE: expand the advansys license statement
- WHENCE: some older AMD drivers are MIT licensed
- qcom: update firmware binary for SM8550
- amdgpu: DMCUB updates for DCN401
- qcom: venus-5.4: add the firmware binary for qcs615
- Revert "qcom: Add sdx61 Foxconn vendor firmware image file"
- amdgpu: update dmcub fw for dcn401
- qcom: Add sdx61 Foxconn vendor firmware image file
- brcm: Fix symlinks for Khadas VIM SDIO wifi config
- amdgpu: update renoir firmware
- amdgpu: update vcn 5.0.0 firmware
- amdgpu: update smu 14.0.3 firmware
- amdgpu: update sdma 7.0.1 firmware
- amdgpu: update psp 14.0.3 firmware
- amdgpu: update gc 12.0.1 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update psp 14.0.4 firmware
- amdgpu: update gc 11.5.2 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: add raven2 ip discovery firmware
- amdgpu: update smu 14.0.2 firmware
- amdgpu: update sdma 7.0.0 firmware
- amdgpu: update psp 14.0.2 firmware
- amdgpu: update gc 12.0.0 firmware
- amdgpu: update vcn 4.0.6 firmware
- amdgpu: update psp 14.0.1 firmware
- amdgpu: update gc 11.5.1 firmware
- amdgpu: update psp 13.0.11 firmware
- amdgpu: update gc 11.0.4 firmware
- amdgpu: add picasso ip discovery firmware
- amdgpu: add raven ip discovery firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update vcn 4.0.4 firmware
- amdgpu: update psp 13.0.7 firmware
- amdgpu: update gc 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update vega10 firmware
- amdgpu: update gc 10.3.6 firmware
- amdgpu: update smu 13.0.10 firmware
- amdgpu: update psp 13.0.10 firmware
- amdgpu: update gc 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: add smu 13.0.0 kicker firmware
- amdgpu: add psp 13.0.0 kicker firmware
- amdgpu: add gc 11.0.0 kicker firmware
- amdgpu: add vcn 5.0.1 firmware
- amdgpu: add sdma 4.4.4 firmware
- amdgpu: add psp 13.0.12 firmware
- amdgpu: add gc 9.5.0 firmware
- amdgpu: add arcturus IP discovery firmware
- amdgpu: update vcn 4.0.0 firmware
- amdgpu: update smu 13.0.0 firmware
- amdgpu: update psp 13.0.0 firmware
- amdgpu: update gc 11.0.0 firmware
- amdgpu: update psp 13.0.14 firmware
- amdgpu: update gc 9.4.4 firmware
- amdgpu: update psp 13.0.6 firmware
- amdgpu: update gc 9.4.3 firmware
- amdgpu: update beige_goby firmware
- amdgpu: update vcn 4.0.5 firmware
- amdgpu: update gc 11.5.0 firmware
- amdgpu: update vcn 4.0.2 firmware
- amdgpu: update gc 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- WHENCE: fix subtly incorrect licensing
- amdgpu: update dmcub fw for dcn32 and dcn401
- mediatek: Update mt8186 SCP firmware
- amdgpu: Update DMCUB fw for DCN401 &amp; DCN315
- WHENCE: unify Driver statements
- qcom: add gpu firmwares for X1P42100 chipset
- QCA: Update WCN785x btusb firmware to 2.0.0-00799-5
- rtl_nic: update firmware of RTL8153A
- qcom: sc8280xp: Updated power FW for X13s
- linux-firmware: update firmware for MT7986
- linux-firmware: update firmware for MT7981
- linux-firmware: update firmware for MT7916
- cirrus: cs35l41: Add Firmware for ASUS NUC using CS35L41
- Revert "iwlwifi: add Bz/gl FW for core96-76 release"
- amdgpu: DMCUB updates for various ASICs
- mediatek MT7922: update bluetooth firmware to 20250523103438
- mediatek MT7921: update bluetooth firmware to 20250523111333
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7921 WiFi device
Resolves: RHEL-95338</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20250812-155" date="1755000000">- Update linux-firmware to latest upstream (RHEL-108845)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- amdgpu: DMCUB updates for various ASICs
- panthor: Add firmware for more Mali GPUs
- amdgpu: update renoir firmware
- amdgpu: add SMU 14.0.3 kicker firmware
- amdgpu: add PSP 14.0.3 firmware
- amdgpu: add GC 12.0.1 kicker firmware
- amdgpu: update navy flounder firmware
- amdgpu: update SDMA 6.1.2 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SDMA 7.0.1 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update vega20 firmware
- amdgpu: update SDMA 7.0.0 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update SDMA 6.0.2 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update navi14 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update navi12 firmware
- amdgpu: update vangogh firmware
- amdgpu: update navi10 firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update vpe 6.1.1 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update SDMA 6.1.1 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update beige goby firmware
- amdgpu: update PSP 13.0.8 firmware
- amdgpu: update GC 10.3.7 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update SDMA 6.0.1 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update dimgrey_cavefish firmware
- amdgpu: update aldebaran firmware
- qca: Update Bluetooth WCN6750 1.1.3-00069 firmware to 1.1.3-00091
- qcom: Add QDSP firmware file for Qualcomm QDU100 device.
- ath12k: WCN7850 hw2.0: update to WLAN.HMT.1.1.c5-00302-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1.115823.3
- ath12k: QCN9274 hw2.0: update to WLAN.WBE.1.5-01651-QCAHKSWPL_SILICONZ-1
- ath11k: WCN6855 hw2.0: update board-2.bin
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04650-QCAHSPSWPL_V1_V2_SILICONZ_IOE-2
- ath11k: QCA2066 hw2.1: update to WLAN.HSP.1.1-03926.13-QCAHSPSWPL_V2_SILICONZ_CE-2.52297.9
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: Update xbl_config firmware file.
- amdgpu: Update GCN 4.0.5 microcode
- amdgpu: Update SDMA 6.1.0 microcode
- amdgpu: Update GC 11.5.0 microcode
- qcom: Add QDU100 firmware image files required for booting.
- linux-firmware: Add firmware for airoha-npu driver
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20250721233113
- qcom: Update DSP firmware for qcm6490 platform
- qcom: update Venus firmware file for v6.0
- i915: Xe3LPD DMC v2.29
- linux-firmware: Update AMD cpu microcode
- qcom: Add QCS6490 symlink for QUPv3 firmware
- qcom: Add firmware binary for SM8750.
- amdgpu: update dmcub fw for dcn314
- cirrus: cs35l41: Add Firmware for various ASUS commercial Laptops using CS35L41 HDA
- cirrus: cs35l41: Update Firmware for Dell Oasis
- cirrus: cs35l56: Add firmware for Cirrus CS35L56 for various Dell laptops
- qcom: Add Audio topology for QCS6490 RB3Gen2
- intel_vpu: Update NPU firmware
- amdgpu: update dmcub fw for various DCN version
- WHENCE: extract more license statements
- WHENCE: clarify io_ti origin
- amdgpu: Update GC 11.5.1 microcode
Resolves: RHEL-108845</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20251111-155.1" date="1762862400">- Update linux-firmware to latest upstream (RHEL-128087)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- rtl_bt: Update RTL8922A BT USB firmware to 0x41C0_C905
- linux-firmware: add firmware for mt7987 internal 2.5G ethernet phy
- rtw88: 8822b: Update firmware to v30.20.0
- rtl_nic: add firmware rtl8125k-1
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- ASoC: tas2781: Update dsp firmware for HP and ASUS projects
- amdgpu: DMCUB updates for various ASICs
- amdgpu: DMCUB updates for various ASICs
- qcom: add SOCCP firmware for kaanapali platform
- xe: Update GUC to v70.53.0 for BMG, LNL, PTL
- i915: Update GUC to v70.53.0 for DG2, MTL
- rtw89: 8851b: update fw to v0.29.41.5
- rtw89: 8852b: update fw to v0.29.128.0 with format suffix -2
- rtw89: 8852b: update fw to v0.29.29.14
- Revert "rtw89: 8852b: update fw to v0.29.128.0"
- rtw89: 8852bt: update fw to v0.29.127.0 with format suffix -1
- rtw89: 8852bt: update fw to v0.29.122.1
- Revert "rtw89: 8852bt: update fw to v0.29.127.0"
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Create audio folder in ti folder, and move all the audio firmwares into it
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Update WHENCE for microcode_amd_fam19h.bin
- linux-firmware: Update AMD cpu microcode
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251015213201
- rtl_bt: Add firmware and config files for RTL8761CUV
- linux-firmware: Update AMD cpu microcode
- qcom: add ADSP firmware for kaanapali platform
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Renaming the file to cover a wide range of HP Lunar Lake system.
- mediatek MT7920: update bluetooth firmware to 20251020151255
- linux-firmware: update firmware for MT7922 WiFi device
- linux-firmware: update firmware for MT7920 WiFi device
- amd-ucode: Fix minimum revisions in README
- cirrus: cs35l41: Rename various Asus Laptop firmware files to not have Speaker ID
- mediatek MT7922: update bluetooth firmware to 20251020143443
- Revert "linux-firmware: update firmware for MT7922 WiFi device"
- QCA: Update Bluetooth WCN6856 firmware 2.1.0-00653 to 2.1.0-00659
- iwlwifi: add Bz/Fm and gl FW for core98-161 release
- iwlwifi: update Bz/Hr and Bz/Gf firmwares for core98-161 release
- iwlwifi: update ty/So/Ma firmwares for core98-161 release
- iwlwifi: update cc/Qu/QuZ firmwares for core98-161 release
- intel: qat: Fix missing link
- amdgpu: DMCUB updates for various ASICs
- nvidia: add generic bootloader for GSP-enabled systems
- linux-firmware: qcom: sync audioreach firmwares from v1.0.0 build
- qcom: vpu: rename firmware binaries
- Intel IPU7: Update product signed firmware binary
- i915: Xe2LPD DMC v2.29
- i915: Xe3LPD DMC v2.32
- i915: Xe3LPD_3002 DMC v2.27
- WHENCE: nvidia: rearrange GSP-RM firmware lines
- linux-firmware: Add ISH firmware file for Intel Pather Lake platform
- linux-firmware: Update firmware file for Intel Magnetar core
- linux-firmware: Update firmware file for Intel BlazarU core
- linux-firmware: Update firmware file for Intel BlazarI core
- qcom: add CDSP firmware for kaanapali platform
- qcom: add version for A650 GMU firmware
- qca: Update Bluetooth WCN6750 1.1.3-00091 firmware to 1.1.3-00100
- qcom: Add firmwares for Kaanapali GPU
- qcom: Update A623 GMU fw
- qcom: Fix QCS615 chipset's GPU secure fw
- qcom: Update DSP firmware for sa8775p platform
- amdgpu: DMCUB updates for various ASICs
- WHENCE: remove link for Kaanapali video firmware
- intel_vpu: Update NPU firmware
- linux-firmware: Add Dell ISH firmware for Intel Lunar Lake systems
- Update VCN for Navi1x, Green Sardine and Renoir
- WHENCE: extract multitech license text
- WHENCE: extract ueagle license
- WHENCE: use LICENCE.sensoray for s2255drv
- WHENCE: rename LICENCE.go7007-s2250 to LICENCE.sensoray
- WHENCE: clean up emi62 and yam license statements
- qcom: vpu: update video firmware binary for SM8550
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x3BAC_ADBA
- qcom: vpu: add video firmware for Kaanapali
- qcom: Update DSP firmware for qcs8300 platform.
- qcom: Add Audio topology for HAMOA-EVK
- intel/ish:Add ISH firmware file for Intel Lunar Lake platform
- mediatek: update firmware version info for MT7986/81/16
- linux-firmware: ql2500_fw: update ISP25xx Firmware
- qcom: Update aic100 firmware files
- qcom: Add audio topology and ADSP firmware for qcs6490-radxa-dragon-q6a
- amdgpu: DMCUB updates for various ASICs
- mediatek: mtk_wed: drop links for mt7988
- Revert "amdgpu: update gc 10.3.6 firmware"
- qcom: Update DSP firmware for qcs8300 platform.
- powervr: update firmware for Imagination Technologies BXS-4-64 GPU
- qcom: Update DSP firmware for sa8775p platform.
- amdgpu: DMCUB updates for various ASICs
- ath12k: WCN7850 hw2.0: update board-2.bin
- qcom: move LEMANS EVK firmware to correct location
- amdgpu: update PSP 14.0.3 kicker firmware
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update VPE 6.1.0 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update SMU 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SDMA 6.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update SDMA 6.1.3 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update VPE 6.1.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- linux-firmware: update firmware for en8811h 2.5G ethernet phy
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- mediatek MT7922: update bluetooth firmware to 20250903123504
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: move Monaco EVK topology from qcs8275 to qcs8300 subdir
- qcom: Add Audio topology for MONACO-EVK
- qcom: add CDSP firmware for qcs615 platform
- qcom: Add Audio topology for LEMANS-EVK
- ath12k: WCN7850 hw2.0@ncm865: add to WLAN.IOE_HMT.1.1-00018-QCAHMTSWPL_V1.0_V2.0_SILICONZ-1
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925:update bluetooth firmware to 20250825220109 Update binary firmware for MT7925 BT devices.
- qcom: vpu: update firmware binaries to fix encoder drain handling
- intel_vpu: Update NPU firmware
- Revert "cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers"
- cs35l56: Rename firmware for Thinkbook 16P Gen6 (17AA3921) without multiple speakers
- xe: Update GUC to v70.49.4 for BMG, LNL, PTL
- i915: Update GUC to v70.49.4 for ADL-P, DG1, DG2, MTL, TGL
- qcom: add ADSP firmware for qcs615 platform
- rtl_bt: Update RTL8822C BT USB firmware to 0x2B66_D962
- iwlwifi: add Bz-HR FW for core90-93 release
- Fix link entry for qat_895xcc.bin
- Move QAT firmware to intel/ subdirectory
- Move all iwlwifi top level files to intel/ directory
- Revert "intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10"
- ath11k: Support WCN6855 hw2.1 with NFA firmware variant
- amdgpu: Update ISP FW for isp v4.1.1
- Update README.md to clarify S-o-b requirements
- firmware: qcom: Reorder VPU firmware entries in WHENCE
- intel_vpu: Update NPU firmware
- amdgpu: DMCUB updates for various ASICs
- intel/ish: Add firmware for LENOVO THINKPAD X1 2-in-1 Gen 10
- cirrus: cs35l41: Move entries to correct driver section in WHENCE
- cirrus: cs35l56: Update firmware for Cirrus Amps for some Lenovo laptops
- ath11k: WCN6855 hw2.0@nfa765: add to WLAN.HSP.1.1-04685-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- cirrus: cs35l56: Add firmware for Cirrus Amps for some Lenovo laptops
- qcom: Add firmware binary for SM8650.
- Link rtl8723b_config.bin to rtl8723bs
- rtw89: 8922a: update fw to v0.35.80.3
- rtw89: 8852c: update fw to v0.27.129.4
- rtw89: 8852c: update fw to v0.27.129.3
- qcom: add CDSP firmware for x1e80100 platform
- iwlwifi: add Bz/gl FW for core97-84 release
- iwlwifi: update ty/So/Ma firmwares for core97-84 release
- iwlwifi: update cc/Qu/QuZ firmwares for core97-84 release
- amdgpu: DMCUB updates for various ASICs
- realtek: rt1321: Add patch firmware of MCU
- mediatek: Add MT8189 SCP firmware
Resolves: RHEL-128087</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260107-155.2" date="1767787200">- Update linux-firmware to latest upstream (RHEL-139962)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- qcom: Update aic100 firmware files
- qca: Update Bluetooth WCN6750 1.1.3-00100 firmware to 1.1.3-00105
- firmware: Revert kernel_boot.elf due to license compliance issue
- linux-firmware: add firmware for an8811hb 2.5G ethernet phy
- i915: Xe3LPD_3002 DMC v2.28
- i915: Xe3LPD DMC v2.33
- intel_vpu: Add firmware for 50xx NPUs and update older ones
- linux-firmware: Update AMD SEV firmware
- amdgpu: DMCUB updates for various ASICs
- qcom: venus-5.4: fix ELF segment alignment to 4 bytes
- mediatek MT7925: update bluetooth firmware to 20251210093205
- linux-firmware: update firmware for MT7925 WiFi device
- rcar_gen4_pcie: add firmware for Renesas R-Car Gen4 PCIe controller
- qcom: Update CDSP firmware for qcm6490 platform
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x488C_DB55
- linux-firmware: Add firmware file for Intel Scorpius core
- rtw89: 8852b: update fw to v0.29.29.15
- cirrus: cs35l41: Update firmware and tuning for various HP laptops
- cirrus: cs35l41: Add support for new HP Clipper laptop
- qcom: drop compatibility a640_zap.mdt symlink
- qcom: add version for a530v3_gpmu.fw2
- xe: Update GUC to v70.55.3 for BMG, PTL
- iwlwifi: add Bz/Sc FW for core101-82 release
- iwlwifi: Add Sc/Gf firmware for core101-82 release
- iwlwifi: update ty/So/Ma firmwares for core101-82 release
- iwlwifi: update cc/Qu/QuZ firmwares for core101-82 release
- amdgpu: DMCUB updates for various ASICs
- qcom: Add firmwares for sm8150 GPU
- qcom: Add firmwares for sm8450 GPU
- qcom: Add firmwares for sm8550 GPU
- qcom: Add firmwares for sm8650 GPU
- qcom: Add firmwares for sm8750 GPU
- Makefile: add licence header
- ath10k: WCN3990 hw1.0: update board-2.bin
- ath10k: QCA9888 hw2.0: update board-2.bin
- ath10k: QCA4019 hw1.0: update board-2.bin
- cirrus: cs35l41: Add support for new HP laptops
- Revert "amdgpu: update GC 11.5.0 firmware"
- linux-firmware: Update amd-ucode copyright information
- linux-firmware: Update AMD cpu microcode
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- ath11k: QCA6698AQ hw2.1: update to WLAN.HSP.1.1-04866-QCAHSPSWPL_V1_V2_SILICONZ_IOE-1
- ath11k: QCA2066 hw2.1: update board-2.bin
- qcom: update ADSP firmware for x1e80100 platform, change the license
- qcom: reorder ADSP, CDSP firmware entries for qcs8300 in WHENCE
- Reapply "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update SMU 14.0.3 firmware"
- Revert "amdgpu: update GC 10.3.6 firmware"
- Revert "amdgpu: update GC 11.5.1 firmware"
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20251124093155
- intel_vpu: Update NPU firmware
- WHENCE: fix version string for video firmware
- qcom: vpu: update video firmware binary for SM8250
- xe: Update GUC to v70.54.0 for BMG, PTL
- Revert "amdgpu: update GC 11.0.1 firmware"
- QCA: Add Bluetooth firmware for WCN685x uart interface
- qcom: Add ADSP firmware for qcs6490-thundercomm-rubikpi3
- qcom: venus-5.4: update firmware binary for v5.4
- qcom: venus-5.4: remove unused firmware file
- iwlwifi: add Sc/Wh FW for core98-181 release
- amdgpu: DMCUB updates for various ASICs
- rtl_bt: Update RTL8852B BT USB FW to 0x42D3_4E04
- ASoC: tas2781: Add more symbol links on SPI devices
- amdgpu: update vega20 firmware
- amdgpu: update vega12 firmware
- amdgpu: update vega10 firmware
- amdgpu: update vangogh firmware
- amdgpu: update renoir firmware
- amdgpu: update yellow carp firmware
- amdgpu: update VCN 3.1.2 firmware
- amdgpu: update PSP 13.0.5 firmware
- amdgpu: update GC 10.3.6 firmware
- amdgpu: update VCN 5.0.0 firmware
- amdgpu: update SMU 14.0.3 firmware
- amdgpu: update PSP 14.0.3 firmware
- amdgpu: update GC 12.0.1 firmware
- amdgpu: update SMU 14.0.2 firmware
- amdgpu: update PSP 14.0.2 firmware
- amdgpu: update GC 12.0.0 firmware
- amdgpu: update VCN 4.0.4 firmware
- amdgpu: update smu 13.0.7 firmware
- amdgpu: update PSP 13.0.7 firmware
- amdgpu: update GC 11.0.2 firmware
- amdgpu: update SMU 13.0.10 firmware
- amdgpu: update SDMA 6.0.3 firmware
- amdgpu: update PSP 13.0.10 firmware
- amdgpu: update GC 11.0.3 firmware
- amdgpu: update smu 13.0.0 kicker firmware
- amdgpu: update PSP 13.0.0 kicker firmware
- amdgpu: update VCN 4.0.0 firmware
- amdgpu: update SMU 13.0.0 firmware
- amdgpu: update PSP 13.0.0 firmware
- amdgpu: update GC 11.0.0 firmware
- amdgpu: update navy flounder firmware
- amdgpu: update sienna cichlid firmware
- amdgpu: update navi14 firmware
- amdgpu: update navi12 firmware
- amdgpu: update navi10 firmware
- amdgpu: update VCN 5.0.1 firmware
- amdgpu: update PSP 13.0.12 firmware
- amdgpu: update GC 9.5.0 firmware
- amdgpu: update PSP 13.0.14 firmware
- amdgpu: update GC 9.4.4 firmware
- amdgpu: update PSP 14.0.5 firmware
- amdgpu: update GC 11.5.3 firmware
- amdgpu: update PSP 14.0.4 firmware
- amdgpu: update GC 11.5.2 firmware
- amdgpu: update green sardine firmware
- amdgpu: update VCN 4.0.3 firmware
- amdgpu: update SDMA 4.4.2 firmware
- amdgpu: update PSP 13.0.6 firmware
- amdgpu: update GC 9.4.3 firmware
- amdgpu: update VCN 4.0.6 firmware
- amdgpu: update PSP 14.0.1 firmware
- amdgpu: update GC 11.5.1 firmware
- amdgpu: update PSP 13.0.11 firmware
- amdgpu: update GC 11.0.4 firmware
- amdgpu: update VCN 4.0.5 firmware
- amdgpu: update PSP 14.0.0 firmware
- amdgpu: update GC 11.5.0 firmware
- amdgpu: update VCN 4.0.2 firmware
- amdgpu: update PSP 13.0.4 firmware
- amdgpu: update GC 11.0.1 firmware
- amdgpu: update beige goby firmware
- amdgpu: update dimgrey cavefish firmware
- amdgpu: update aldebaran firmware
- amdgpu: add vce1 firmware
- mediatek MT7922: update bluetooth firmware to 20251118163447
- linux-firmware: update firmware for MT7922 WiFi device
- qcom: update ADSP, CDSP firmware for kaanapali platform, change the license
- qcom: add ADSP, CDSP firmware for sm8750 platform
- rtl_nic: add firmware rtl9151a-1
- qcom: Update aic100 firmware files
- mt76: add firmware for MT7990
- mt76: update firmware for MT7992
- mt76: update firmware for MT7996
- cirrus: cs35l57: Add firmware for a few Dell products
- cirrus: cs42l45: Add firmware for Cirrus Logic CS42L45 SDCA codec
- qcom: Add sdx35 Foxconn vendor firmware image file
- linux-firmware: Update AMD cpu microcode
Resolves: RHEL-139962</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 20260130-155.3" date="1769774400">- Update linux-firmware to latest upstream (RHEL-145341)
  Changes since the last update are noted on items below, copied from
  the git changelog of upstream linux-firmware repository.
- intel/ish: Add Lenovo ISH firmware support for X1 and X9 systems
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Lenovo laptops
- cirrus: cs42l45: Add CS42L45 SDCA codec firmware for Dell laptops
- cirrus: cs35l57 cs35l63: Add firmware for Cirrus Amps for some Lenovo laptops
- cirrus: cs35l56 cs35l57: Add and update firmware for some Dell laptops
- Intel IPU7: Update firmware binary for Panther Lake
- linux-firmware: update firmware for MT7921 WiFi device
- amdgpu: DMCUB updates for various ASICs
- linux-firmware: Add firmware file for Intel ScorpiusGfp2 core
- linux-firmware: Update firmware file for Intel Scorpius core
- linux-firmware: Update firmware file for Intel BlazarIGfP core
- linux-firmware: Update firmware file for Intel BlazarI core
- linux-firmware: Update firmware file for Intel BlazarU-HrPGfP core
- linux-firmware: Update firmware file for Intel BlazarU core
- rtl_bt: Update RTL8852BT/RTL8852BE-VT BT USB FW to 0x06EB_C65F
- linux-firmware: Add firmware for airoha-npu-7583 driver
- iwlwifi: add Bz/Sc FW for core102-56 release
- iwlwifi: Add Hr/Gf firmware for core102-56 release
- iwlwifi: update ty/So/Ma firmwares for core102-56 release
- xe: Add GSC 105.0.2.1301 for PTL
- mediatek: rename MT8188 SCP firmware
- qcom: Update DSP firmware for QCM6490 platform
- linux-firmware: qcom: sync audioreach firmwares from v1.0.1 build
- linux-firmware: update firmware for MT7925 WiFi device
- mediatek MT7925: update bluetooth firmware to 20260106153314
- mediatek MT7920: update bluetooth firmware to 20260105151350
- mediatek MT7922: update bluetooth firmware to 20260106153735
- linux-firmware: update firmware for MT7922 WiFi device
- Mellanox: Add new mlxsw_spectrum firmware xx.2016.3900
- amdgpu: Update dcn314, dcn315 firmware to 0.1.42.0
- qcom: Update DSP firmware for sa8775 platform
- QCA: Add Bluetooth firmware for QCC2072 uart interface
- i915: Xe3p_LPD DMC v2.33
- qcom: Update DSP firmware for qcs8300 platform
- linux-firmware: update firmware for MT7920 WiFi device
Resolves: RHEL-145341</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260311-155.4" date="1774526400">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260411-155.5" date="1779192000">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260609-161" date="1786449600">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 20260707-161.1" date="1786449601">- Update linux-firmware to latest upstream ()</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 20260804-161.2" date="1787832000">- Update linux-firmware to latest upstream ()</changelog>
</package>
<package pkgid="52b7850b6c66389210247f12780f2411306045d1f594dcdaa12427aa937ec827" name="lldpad-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="4.gitf1dd9eb.el9"/>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.0-5.git85e5583" date="1700049600">- Convert the license tag to SPDX format (RHELMISC-1358)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-1.gitf1dd9eb" date="1725451200">- Rebase to 1.1.1
- Fix program segfaults after entering the quit command (RHEL-5814)
- Fix setting interface status not survive reboot (RHEL-5824)
- Fix some other bugs</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-2.gitf1dd9eb" date="1725451201">- Update gating test</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-3.gitf1dd9eb" date="1725883200">- Rebase to latest upstream code
- Remove interface configure if the interface deleted (RHEL-13242)
- Fix strdup is not freed (RHEL-37524)
- Fix using uninitialized value (RHEL-37548)
- Fix copy past error (RHEL-37679)
- Fix resource leak (RHEL-37685)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.1.1-4.gitf1dd9eb" date="1737374400">- do not remove config when stopping lldpad (RHEL-61874)</changelog>
</package>
<package pkgid="a6a3af93f1835786adc63dae5acd429954f8db3c94f3bae358d7fb0efccb3739" name="llvm-cmake-utils" arch="aarch64">
  <version epoch="0" ver="21.1.8" rel="2.el9"/>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-9" date="1750075200">- Use libdir suffix in versioned prefix</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.6-10" date="1750161600">- Fix llvm-config alternatives handling (rhbz#2361779)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.7-1" date="1750334400">- Update to LLVM 20.1.7</changelog>
  <changelog author="Kashyap Chamarthy &lt;kchamart@redhat.com&gt; - 20.1.7-2" date="1750420800">- Add riscv64 enablement bits; thanks: Songsong Zhang
   (U2FsdGVkX1@gmail.com) and David Abdurachmanov (davidlt@rivosinc.com)</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 20.1.8-1" date="1752062400">- Update to LLVM 20.1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20.1.8-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Murphy &lt;murp@redhat.com&gt; - 20.1.8-3" date="1753704000">- Backport fix for pgo optimized rust toolchain on ppc64le (rhbz#2382683)
- Backport fix for crbit spill miscompile on ppc64le power9 and power10 (rhbz#2383037)
- Backport fix for build of highway package on ppc64le (rhbz#2383182)</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.7-1" date="1765454400">- Update to 21.1.7</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.8-1" date="1767441600">- Update LLVM Toolset to 21.1.8 [rhel-9]</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 21.1.8-2" date="1771416000">- Remove compat libs for LLVM 20</changelog>
</package>
<package pkgid="d6904d773bbe7d4f8158ef96f2004b116cfcd7f476eb6543fa12f5186c3e8c13" name="llvm-libs" arch="aarch64">
  <version epoch="0" ver="14.0.6" rel="1.el9"/>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 12.0.0-6" date="1625659200">- Fix DTRACE_PROBE4() compilation failure</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 12.0.1" date="1626091200">- 12.0.1 Release
- Remove llvm11 compat package</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 12.0.1-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 12.0.1-3" date="1629288000">- Rebuilt for libffi 3.4.2 SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 13.0.0-1" date="1633521600">- 13.0.0 Release</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 13.0.1-1" date="1643803200">- 13.0.1 Release</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 14.0.0-1" date="1649851200">- Update to 14.0.0</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 14.0.0-2" date="1651233600">- Remove llvm-cmake-devel package</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 14.0.5-1" date="1655726400">- Update to 14.0.5</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; - 14.0.6-1" date="1658145600">- Update to 14.0.6</changelog>
</package>
<package pkgid="41fdf7d3e83d4d9828f9cf722ab1c5dd80a2285364afa3b50a577227a0277106" name="llvm-libs" arch="aarch64">
  <version epoch="0" ver="19.1.7" rel="2.el9"/>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 18.1.6-2" date="1716379200">- Turn on build condition bundle_compat_lib by default</changelog>
  <changelog author="Nikita Popov &lt;npopov@redhat.com&gt; - 18.1.6-3" date="1716897600">- Fix use after free on ppc64le (rhbz#2283525)</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 18.1.8-1" date="1721131200">- Update to LLVM 18.1.8</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 18.1.8-2" date="1723118400">- Remove llvm 17 compat lib</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 18.1.8-3" date="1723723200">- Workaround for GFX11.5 export priority (RHEL-49517)</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 19.1.3-1" date="1731153600">- Update to 19.1.3</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 19.1.5-1" date="1733313600">- Update to 19.1.5
- Enable LLVM_ENABLE_ZSTD (rhbz#2321848)
- Remove HTML documentation
- Add lldb man pages
- Fix profiling after a binutils NOTE change (rhbz#2322754)
- Install i386 config files on x86_64</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 19.1.5-2" date="1733745600">- Disable libomp tests on s390x RHEL entirely.</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 19.1.7-1" date="1737633600">* Update to LLVM 19.1.7 (RHEL-57460)</changelog>
  <changelog author="Konrad Kleine &lt;kkleine@redhat.com&gt; - 19.1.7-2" date="1738843200">- Remove llvm 18 compat lib</changelog>
</package>
<package pkgid="7b5dea90096bf3ea1e3479fdf2c5910a64624cc1e648a7f4aed7d81424cf7eeb" name="lmdb-doc" arch="noarch">
  <version epoch="0" ver="0.9.29" rel="3.el9"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.25-1" date="1594123200">- Upgrade to version 0.9.25
- Use OpenLDAP git directly in place of GitHub mirror</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 0.9.25-2" date="1594641600">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.25-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.26-1" date="1597233600">- Upgrade to version 0.9.26</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.27-1" date="1603800000">- Upgrade to version 0.9.27</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.27-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.28-1" date="1612785600">- Upgrade to version 0.9.28
- Specfile refactoring</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 0.9.29-1" date="1615982400">- Upgrade to version 0.9.29</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.29-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4d7fdd8876ebe3807e8ba663bda1f29c7beec7dd692f4fdc1db718c4eeb05d86" name="log4j" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-1" date="1692619200">- Update to upstream version 2.20.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-2" date="1692705600">- Do not install zip files</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-3" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-9" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-16" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="8dc3ca2e1284261d86e8fd48a7d20452e7f74178181598be7b7972e2d991883b" name="log4j-bom" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-1" date="1692619200">- Update to upstream version 2.20.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-2" date="1692705600">- Do not install zip files</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-3" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-9" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-16" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="8aa23eaac004b8ddbdeee7de45aa4100ec154d1f058651f5610661d30a8500d7" name="log4j-javadoc" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-1" date="1692619200">- Update to upstream version 2.20.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-2" date="1692705600">- Do not install zip files</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-3" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-9" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-16" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="ee860e97d1420d0ed8ade515853046c2eab23da867fa924f1a6b84708d65af84" name="log4j-jcl" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-1" date="1692619200">- Update to upstream version 2.20.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-2" date="1692705600">- Do not install zip files</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-3" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-9" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-16" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="63a4e7aac86e8688977c10362d9cee102e2bb0d81856a8a5271ba37f484cace8" name="log4j-over-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-6" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-7" date="1599652800">- Disable unused log4j12 module.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7.30-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.30-10" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1.7.30-11" date="1637064000">- Enable slf4j-migrator and log4j-over-slf4j modules</changelog>
  <changelog author="Simon Legner &lt;Simon.Legner@gmail.com&gt; - 1.7.32-1" date="1637582400">- Update to upstream version 1.7.32</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="6c5cadc748a8f5f689f476441ae57a93baba901ddf88414c2f09dacce247bb6f" name="log4j-over-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="b6a64173bae6ce719e5713033f6d4e363eacefcbd62e3395fe9c7930f83de5da" name="log4j-over-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1da51f9bc50495783e39e16599b4fa0a9c3bdbae91fb062227aea94e62f33273" name="log4j-over-slf4j" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="4e53abc01dc0e37c8bd7d9e090747156b09aaddf1da4c38a6162282c36c7e5f3" name="log4j-slf4j" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-1" date="1692619200">- Update to upstream version 2.20.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-2" date="1692705600">- Do not install zip files</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-3" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-9" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-16" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="242556ce8fa8fd7dc57427b79b71296f16474963870602c3c5afd306e0c87f7d" name="log4j-web" arch="noarch">
  <version epoch="0" ver="2.17.2" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.13.3-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 2.14.1-1" date="1627819200">- Update to 2.14.1
- Disable javadoc (#1988896)
- Build with jansi-2
- Remove deps on slf4j-ext (no longer available in Fedora 35)</changelog>
  <changelog author="S&#xE9;rgio Basto &lt;sergio@serjux.com&gt; - 2.15.0-1" date="1639310400">- Update log4j to 2.15.0 (#2030907)
- Security fix for CVE-2021-44228 (#2030945)</changelog>
  <changelog author="Paul Wouters &lt;paul.wouters@aiven.io&gt; - 2.16.0-1" date="1639396800">- Update log4j to 2.16.0 - Disables JNDI by default</changelog>
  <changelog author="Paul Wouters &lt;paul.wouters@aiven.io&gt; - 2.17.0-1" date="1639828800">- Update log4j to 2.17.0 for CVE-2021-45105 Denial of Service attack</changelog>
  <changelog author="Paul Wouters &lt;paul.wouters@aiven.io&gt; - 2.17.1-1" date="1640692800">- Update log4j to 2.17.1 for CVE-2021-44832 RCE via JDBC Appender (when attacker controls config)</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.17.1-2" date="1645444800">- Remove dependency on jackson</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.17.1-3" date="1645617600">- Fix compatibility with OpenJDK 8</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.17.1-4" date="1666094400">- Remove glyphicons resources from source package</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.17.2-1" date="1666267200">- Update to upstream version 2.17.2
- Re-add log4j-web subpackage</changelog>
</package>
<package pkgid="ced40e4e99a241c44342a9532c6d08240685de2b04f7dced1eeb0797ff552ece" name="log4j-web" arch="noarch">
  <version epoch="0" ver="2.20.0" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-1" date="1692619200">- Update to upstream version 2.20.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.20.0-2" date="1692705600">- Do not install zip files</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-3" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.20.0-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.20.0-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-9" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.20.0-16" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="dc4c0e3bc7c292066efb67afc05948c16feb00cfe33139f342c516360be51d71" name="low-memory-monitor-doc" arch="noarch">
  <version epoch="0" ver="2.1" rel="4.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 2.0-1" date="1573732800">+ low-memory-monitor-2.0-1
- Update to 2.0</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 2.0-2" date="1574078400">+ low-memory-monitor-2.0-2
- Rename -docs subpackage to -doc</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 2.0-3" date="1574164800">+ low-memory-monitor-2.0-3
- Disable OOM killer by default for now
- Import into Fedora (#1769843)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 2.0-6" date="1603886400">+ low-memory-monitor-2.0-6
- Reload presets when updating from an older version to enable daemon</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 2.1-1" date="1605614400">+ low-memory-monitor-2.1-1
- Update to 2.1
- Don't poke at sysrq proc file (#1898524)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e1bf5b3d539e2f4ba7a4adf86fd9c01dfd82b9b2b4668c0e244410e1b0a7d71e" name="lpsolve-devel" arch="aarch64">
  <version epoch="0" ver="5.5.2.0" rel="28.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.5.2.0-24" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.5.2.0-25" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.5.2.0-26" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.5.2.0-27" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.5.2.0-28" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="27283c9ec83172148a2960ffc86c477486090f3868cbf6de7267074a0bc54ecf" name="lua-static" arch="aarch64">
  <version epoch="0" ver="5.4.4" rel="4.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.2-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-5" date="1666008000">- apply upstream fix for CVE-2022-33099</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-6" date="1666008001">- Enable gating</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 5.4.2-7" date="1666699200">- Fix up CVE-2022-33099 patch</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-1" date="1674561600">- Rebase to lua 5.4.4
- Resolves CVE-2021-44964</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-2" date="1675425600">- Resolves CVE-2021-43519</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-3" date="1675425601">- Apply upstream patch for CVE-2022-28805</changelog>
  <changelog author="Florian Festi &lt;ffesti@redhat.com&gt; - 5.4.4-4" date="1681732800">- Disable bootstrap mode forgotten on 5.4 rebase (#2135419)</changelog>
</package>
<package pkgid="48b8f2e17498b620cf6cd91889ae9e499a805ff62f7010b8b23e8174b6fd7843" name="lvm2-testsuite" arch="aarch64">
  <version epoch="9" ver="2.03.33" rel="4.el9"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-3" date="1731585600">- Fix duplicate LV names when converting pools to RAID1 with more than 2 legs.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
</package>
<package pkgid="08cb95ef085f057a3c62b848cd81cb2e84e86f4f800d0386d5d2ff7931f5b147" name="lvm2-testsuite" arch="aarch64">
  <version epoch="9" ver="2.03.33" rel="4.el9_8.1"/>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-4" date="1734436800">- Workaround for NVMe WWID changing after kernel update.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-5" date="1736510400">- Fix temporary LVs not cleaned when converting in use LV to a thin pool.
- Check FS resize is supported before extending LV.
- Fix issue affecting memory locking before suspend (2.03.27).</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.28-6" date="1738584000">- Fix race causing lvm2 not recognizing active devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-1" date="1746532800">- Update to upstream version 2.03.32.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.32-2" date="1748952000">- Fix vgremove hanging immediately after lockstart.
- Add repair option for RAID volumes with too many transiently failed devices.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-1" date="1759147200">- Update to upstream version 2.03.33.
- See WHATS_NEW and WHATS_NEW_DM for more information.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-2" date="1762776000">- Add message when activating RAID volumes with snapshots.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-3" date="1767700800">- Allow integrity to use multiple segments for metadata.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4" date="1768478400">- Handle wrong XFS reported size when shrinking LV immediately after growing.</changelog>
  <changelog author="Marian Csontos &lt;mcsontos@redhat.com&gt; - 2.03.33-4.el9_8.1" date="1773057600">- Fix false positive warnings about stray FDs on s390x.</changelog>
</package>
<package pkgid="3583ca1a82135aca5a5f90be9e5c65cbd32ae5369cf1554ba92f076f9c3fb9eb" name="lz4-static" arch="aarch64">
  <version epoch="0" ver="1.9.3" rel="5.el9"/>
  <changelog author="Igor Gnatenko &lt;ignatenkobrain@fedoraproject.org&gt; - 1.9.1-1" date="1565784000">- Update to 1.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Timoth&#xE9;e Ravier &lt;travier@redhat.com&gt; - 1.9.3-1" date="1609934400">- Update to 1.9.3 and switch to Meson</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Martisko &lt;jamartis@redhat.com&gt; - 1.9.3-4" date="1622116800">- Fix cve-2021-3520
resolves: cve-2021-3520</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.9.3-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="418a705bf714c1eb17f78e7bdd9456cbd7ca41ded530a39be1cf023cf2f8f818" name="m17n-db-devel" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="16.el9"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.0-7" date="1567080000">- Add si-sayura.mim input method</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.0-8" date="1570708800">- Fix mni-inscript2-{beng,mtei}.mim and sat-inscript2-{deva,olck}.mim</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.8.0-10" date="1584532800">- Use make_build and make_install macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.0-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.8.0-14" date="1623153600">- Resolves:rhbz#1961997 - Add gating tests from rhel-8
- Malayalam Mozhi input scheme bug fix</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.8.0-15" date="1623153601">- Resolves:rhbz#1961997 - minglish file permission fix</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.0-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c6d78d8e095c1ad03beb65b78440d164f5de0a2dcaf9f25afeadbe00d7f723b5" name="m17n-db-extras" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="16.el9"/>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.0-7" date="1567080000">- Add si-sayura.mim input method</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 1.8.0-8" date="1570708800">- Fix mni-inscript2-{beng,mtei}.mim and sat-inscript2-{deva,olck}.mim</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.8.0-10" date="1584532800">- Use make_build and make_install macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.0-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.8.0-14" date="1623153600">- Resolves:rhbz#1961997 - Add gating tests from rhel-8
- Malayalam Mozhi input scheme bug fix</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.8.0-15" date="1623153601">- Resolves:rhbz#1961997 - minglish file permission fix</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.0-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d9a4280b7f56b19c1f1ca6c50131f1f57df14ad9154b2d79a124f47b59406475" name="m17n-lib-devel" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.0-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.8.0-11" date="1621944000">- Resolves:rhbz#1961998 - Add gating tests from rhel-8</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.8.0-12" date="1623067200">- Resolves:rhbz#1967892 - Add conditional for anthy module subpackage</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.0-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="95cfa270cc45a4a2c2c4cc0fc3117bd121d3d4b20ae5f5aa3d729eb6862276ff" name="m17n-lib-tools" arch="aarch64">
  <version epoch="0" ver="1.8.0" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8.0-9" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.0-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.8.0-11" date="1621944000">- Resolves:rhbz#1961998 - Add gating tests from rhel-8</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.8.0-12" date="1623067200">- Resolves:rhbz#1967892 - Add conditional for anthy module subpackage</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.8.0-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="aab19f37a4380342fc6a01629265da66c6e32ee1c8ba9d99266b0ed05ec695bb" name="make-devel" arch="aarch64">
  <version epoch="1" ver="4.3" rel="8.el9"/>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1:4.3-8" date="1706702400">- Don't try to execute directories (RHEL-22829)</changelog>
</package>
<package pkgid="3c6d875012fcd465e8b0535f069befa1d37b252b763d9b58e4810f8da065fabd" name="make441-devel" arch="aarch64">
  <version epoch="1" ver="4.4.1" rel="3.el9"/>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1:4.3-10" date="1657800000">- Add SCL compatibility to LTS builds.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.3-11" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1:4.4-1" date="1667304000">- Rebase to make 4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1:4.4-3" date="1675080000">- Handle SIGPIPE as a fatal signal</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1:4.4.1-1" date="1680264000">- Rebase to make 4.4</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1:4.4.1-2" date="1683115200">- Ensure that we can transition from make-latest to make</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1:4.4.1-3" date="1720785600">- Initial commit for make-latest.el9</changelog>
</package>
<package pkgid="47cb7994c67bc6a2387cb4f058c9f96e6635d9e98b4d96fe8d4cf4777015e59f" name="maven" arch="noarch">
  <version epoch="1" ver="3.8.5" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-11" date="1632484800">- Create a symlink to jansi shared object
- Related: rhbz#1994935</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-12" date="1632484801">- Add OpenJDK 17 binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-13" date="1635854400">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-14" date="1636113600">- Do not override JAVA_HOME set by user
- Resolves: rhbz#2020478</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.8.4-1" date="1639742400">- Update to upstream version 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.4-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.4-3" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-1" date="1650542400">- Update to upstream version 3.8.5</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.5-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="8efd9696eaf958c990467983a833b8c7dddfde0d2e7004644ecd93b5932526ec" name="maven" arch="noarch">
  <version epoch="1" ver="3.9.9" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-1" date="1724414400">- Update to upstream version 3.9.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-2" date="1727265600">- Drop bindings for OpenJDK &lt; 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-3" date="1727265601">- Update gating.yaml</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-4" date="1730289600">- Expect JVMs in %_jvmdir instead of %_jvmlibdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-6" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-8" date="1732536000">- Exclude maven-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-9" date="1732536001">- Add test plan for maven-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-11" date="1733140800">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-12" date="1733140801">- Reuse jlink image if it already exists</changelog>
</package>
<package pkgid="7b65668d936293bb2ca8a90a0d9eef5a994d7ffbf507b61cdc4619a7d333aefc" name="maven-antrun-plugin" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="5.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8-8" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-1" date="1589716800">- Update to upstream version 3.0.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.8-11" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-12" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="45623db5556a5449da0ca3b082b6042889f5ab947b6a4c2d3904393974d91b37" name="maven-antrun-plugin" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-12" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-1" date="1650974400">- Update to upstream version 3.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="af5c6fc59e302ae564aa3a84e3fe3da47822ed707caa5eb8ff93ef1c599ee5a1" name="maven-antrun-plugin" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="20.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-5" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.0-8" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.0-9" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-10" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-11" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-19" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="2f8012b6196abce9b80cb1cc60777cac99b6d5ba3f1a44bbe840c3b678bf33f2" name="maven-antrun-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="5.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8-8" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-1" date="1589716800">- Update to upstream version 3.0.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.8-11" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-12" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="121df4974df832990e8b1e79dbceb26bef25aa2e5566f749caaacbaaa451b1cd" name="maven-antrun-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-12" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-1" date="1650974400">- Update to upstream version 3.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="4d1bbe2f11098f09ff87230fb16aec48d9a5694b642b94fd8777a48f38bcdf0f" name="maven-antrun-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="20.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-5" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.0-8" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.0-9" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-10" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-11" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-19" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="8f99c0538ab8719cbecb94938d88a8ceac5d9a44850ca4e167abcbb7cc09402d" name="maven-archiver" arch="noarch">
  <version epoch="0" ver="3.5.2" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.5.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.5.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.5.1-1" date="1611835200">- Update to upstream version 3.5.1</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.5.1-1" date="1612008000">- Update to version 3.5.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.1-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.2-1" date="1650974400">- Update to upstream version 3.5.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.2-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="fa68ba43cccd02782b727ca2f0b82056d725edf417395a046a1a5c74c9cd8e95" name="maven-archiver" arch="noarch">
  <version epoch="0" ver="3.6.2" rel="3.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-1" date="1692964800">- Update to upstream version 3.6.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.1-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.1-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.2-1" date="1724414400">- Update to upstream version 3.6.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.2-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c17931761f5d2973d2cb5eec64a0c5e7b3b21f625c3bfc1836f035bb826b7408" name="maven-archiver-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.5.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:3.5.0-3" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.5.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.5.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.5.1-1" date="1611835200">- Update to upstream version 3.5.1</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.5.1-1" date="1612008000">- Update to version 3.5.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.5.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0ca913e2e77d332cea1485435f316cbf0006d81cc94d0cf3254671ccb82ee7a6" name="maven-archiver-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.2" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.5.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.5.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.5.1-1" date="1611835200">- Update to upstream version 3.5.1</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.5.1-1" date="1612008000">- Update to version 3.5.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.1-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.2-1" date="1650974400">- Update to upstream version 3.5.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.2-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="0d58a86acf44f9b271a9197a8357f9507c979f47b98a7e91af504856559c1784" name="maven-archiver-javadoc" arch="noarch">
  <version epoch="0" ver="3.6.2" rel="3.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-1" date="1692964800">- Update to upstream version 3.6.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.1-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.1-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.2-1" date="1724414400">- Update to upstream version 3.6.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.2-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="365345d7435c3d7a3cc1f2fe2cc74004ff18faa8c3ca85293493fa751de24c2a" name="maven-artifact-transfer" arch="noarch">
  <version epoch="1" ver="0.13.1" rel="30.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.13.1-10" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:0.13.1-13" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-14" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.13.1-26" date="1724414400">- Set Java compiler source/target via javaVersion property</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.13.1-27" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="8007539bc6799978cbb94f68b21269277f5cfd1519e0049dc76a1d515b36a6e5" name="maven-artifact-transfer" arch="noarch">
  <version epoch="1" ver="0.13.1" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 0.13.1-1" date="1610625600">- Update to upstream version 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.13.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:0.13.1-4" date="1641384000">- Port to maven 3.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.13.1-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="592ed7155214f874177ca2e03e6b343bc9c6686412f1fff9e3e857ad03720ca4" name="maven-artifact-transfer-javadoc" arch="noarch">
  <version epoch="1" ver="0.13.1" rel="30.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.13.1-10" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-11" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-12" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:0.13.1-13" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-14" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.13.1-26" date="1724414400">- Set Java compiler source/target via javaVersion property</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.13.1-27" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e83e13dbfb6858d65ed6a1223d1e50cbe60afa45cbd163c2a083d699210ddff6" name="maven-artifact-transfer-javadoc" arch="noarch">
  <version epoch="1" ver="0.13.1" rel="5.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 0.12.0-1" date="1579608000">- Update to upstream version 0.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.11.0-3" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 0.13.1-1" date="1610625600">- Update to upstream version 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.13.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.13.1-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.13.1-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:0.13.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c0ddf515fb271604627b1ba21dbbc5166aa46bcac16a2f66db9e1b26d27fe239" name="maven-artifact-transfer-javadoc" arch="noarch">
  <version epoch="1" ver="0.13.1" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 0.13.1-1" date="1610625600">- Update to upstream version 0.13.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.11.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.13.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:0.13.1-4" date="1641384000">- Port to maven 3.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.13.1-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.13.1-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="4f71fbbd7e11f4f67d53a31ff7b7b7aaef0ee684ebefceda9816264b84ed633c" name="maven-assembly-plugin" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="8.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.3.0-1" date="1588852800">- Update to version 3.3.0.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-1" date="1592827200">- Update to upstream version 3.3.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-5" date="1621252801">- Bump release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-6" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-7" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.0-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2190e22221d218e661b97ca566021e477d6a92d6e25c662367b3d12f8536d990" name="maven-assembly-plugin" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="3b6d78b148beb3b76114184726b0de2171571663dcfad576d92bf84365ba453d" name="maven-assembly-plugin" arch="noarch">
  <version epoch="0" ver="3.7.1" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.6.0-1" date="1692014400">- Update to upstream version 3.6.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.7.1-1" date="1712577600">- Update to upstream version 3.7.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.1-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="5eef20e694608bad2d101d7b703c5d7c8d06f42586478623606334b50d0f8fbb" name="maven-assembly-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="8.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.3.0-1" date="1588852800">- Update to version 3.3.0.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-1" date="1592827200">- Update to upstream version 3.3.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-5" date="1621252801">- Bump release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-6" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-7" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.0-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1ba8a031f383579a59fb6b9bddd1ac5f0037b212886fde15a3427a92901f951b" name="maven-assembly-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-5" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="fb71454a23f795cae6b1a120be3e7d8d353bd6826546b1fd04083da8dc8cc34e" name="maven-assembly-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.7.1" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.6.0-1" date="1692014400">- Update to upstream version 3.6.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.7.1-1" date="1712577600">- Update to upstream version 3.7.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.1-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.1-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="9079412ffb7f26a0348c508bb8f4e21dab412d26672a0017cec0f13a51ff9af9" name="maven-bundle-plugin" arch="noarch">
  <version epoch="0" ver="5.1.9" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-1" date="1692273600">- Update to upstream version 5.1.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.9-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.9-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.9-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.9-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-7" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-12" date="1724414400">- Fix Maven compiler target setting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-13" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-15" date="1735560000">- Remove Provides/Obsoletes on maven-plugin-bundle-javadoc</changelog>
</package>
<package pkgid="7e8aac49f16f215a8bd4ede56343611f1551de6545b477cc4a76f679802a00b2" name="maven-bundle-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="5.1.9" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-1" date="1692273600">- Update to upstream version 5.1.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.9-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.9-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.9-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.9-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-7" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-12" date="1724414400">- Fix Maven compiler target setting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-13" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.9-15" date="1735560000">- Remove Provides/Obsoletes on maven-plugin-bundle-javadoc</changelog>
</package>
<package pkgid="5dc3f786439c9f07479e7f6c2bd37dcef4c9b6a92d3ea79311cc254349f8d568" name="maven-common-artifact-filters" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.1.1-1" date="1612008000">- Update to version 3.1.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.1-1" date="1620993600">- Update to upstream version 3.1.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.0-1" date="1641470400">- Update to upstream version 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e1ebdcd30587c1fb6f1937d98366bf050f341a2d57108c02cfe8d92d4c4d805f" name="maven-common-artifact-filters" arch="noarch">
  <version epoch="0" ver="3.4.0" rel="3.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.2-1" date="1692273600">- Update to upstream version 3.3.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.2-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.2-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.2-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.2-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.2-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.0-1" date="1724414400">- Update to upstream version 3.4.0
- Resolves: rhbz#2291028</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="867c47d3d8b819ceaabf7c988e87a8dca80757bb20f20bba338adda098eaa82d" name="maven-common-artifact-filters-javadoc" arch="noarch">
  <version epoch="0" ver="3.1.1" rel="5.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.1.0-1" date="1588852800">- Update to version 3.1.0.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.0-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.1.1-1" date="1612008000">- Update to version 3.1.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.1-1" date="1620993600">- Update to upstream version 3.1.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.1-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.1-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a9ad660e0d4333bbaa4503ea12e5dcc21cabc8e5765aee0c09be9097f535a98f" name="maven-common-artifact-filters-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.1.1-1" date="1612008000">- Update to version 3.1.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.1-1" date="1620993600">- Update to upstream version 3.1.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.0-1" date="1641470400">- Update to upstream version 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5c83af38e7911a9d1b0d49e2cac7cf692647366f23ca147be1ee6c65f256de72" name="maven-common-artifact-filters-javadoc" arch="noarch">
  <version epoch="0" ver="3.4.0" rel="3.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-6" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.2-1" date="1692273600">- Update to upstream version 3.3.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.2-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.2-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.2-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.2-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.2-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.0-1" date="1724414400">- Update to upstream version 3.4.0
- Resolves: rhbz#2291028</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c0241d4ffef094c088ebcba270e88120d0fd9817adb5ff5eba18f198f37cd18e" name="maven-compiler-plugin" arch="noarch">
  <version epoch="0" ver="3.10.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.1-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.1-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.8.1-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.1-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.1-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.8.1-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.10.1-1" date="1650801600">- Update to upstream version 3.10.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.1-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="b7babfc767ec81875bfb23bcf8101de5c1baf7fff9c406e8dc400ab12285ba79" name="maven-compiler-plugin" arch="noarch">
  <version epoch="0" ver="3.12.1" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.11.0-1" date="1692100800">- Update to upstream version 3.11.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.11.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.1-1" date="1706788800">- Update to upstream version 3.12.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.12.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.12.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.1-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="3659ac0dc9178b7cc690902aa5a29d4e365abe8f15bf04846ebab96b2ffd7eb7" name="maven-compiler-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.10.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.1-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.1-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.8.1-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.1-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.1-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.8.1-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.10.1-1" date="1650801600">- Update to upstream version 3.10.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.1-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e565dbbc8fb6774286197cfb5695831456c9b8c5daaeae0e9e1a221c22d7d592" name="maven-compiler-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.12.1" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.11.0-1" date="1692100800">- Update to upstream version 3.11.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.11.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.11.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.1-1" date="1706788800">- Update to upstream version 3.12.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.12.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.12.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.1-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="ef36e165e522deeb9f5236564281e03229b8af54913de9f39a0e82e69a6c3056" name="maven-compiler-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.8.1" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.8.1-2" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.1-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.8.1-5" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 3.8.1-6" date="1595246400">- Add patch for NPE during testCompile</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.1-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.8.1-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.8.1-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.8.1-10" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.8.1-11" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.8.1-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6a885aae4fa319d2c25e0cd19ef6c268ea85ba419792206beb7407d279f2a74b" name="maven-dependency-analyzer" arch="noarch">
  <version epoch="0" ver="1.11.3" rel="6.el9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.11.1-3" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.1-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.2-1" date="1598356800">- Update to upstream version 1.11.2</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.11.3-1" date="1598443200">- Update to version 1.11.3.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.3-1" date="1599825600">- Update to upstream version 1.11.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.3-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.3-4" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.3-5" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11.3-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c5190f46243cc44a8be925e68d464fae1cf3ceca146ba63a2086dc1efd110ec8" name="maven-dependency-analyzer" arch="noarch">
  <version epoch="0" ver="1.12.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.2-1" date="1598356800">- Update to upstream version 1.11.2</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.11.3-1" date="1598443200">- Update to version 1.11.3.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.3-1" date="1599825600">- Update to upstream version 1.11.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.3-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.3-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.3-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.11.3-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12.0-1" date="1650974400">- Update to upstream version 1.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="0d1bd13a1e19ae1161cacc1848049985429d8415728274cf1fc8d9a79b9cc1bf" name="maven-dependency-analyzer" arch="noarch">
  <version epoch="0" ver="1.13.2" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.13.2-1" date="1692100800">- Update to upstream version 1.13.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.13.2-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.2-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.13.2-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.13.2-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.2-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.13.2-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.13.2-15" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1a36b21ea7b010015facd9d08f30a623de618a525de4794d709d2ce4c3085cd2" name="maven-dependency-analyzer-javadoc" arch="noarch">
  <version epoch="0" ver="1.11.3" rel="6.el9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.11.1-3" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.1-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.2-1" date="1598356800">- Update to upstream version 1.11.2</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.11.3-1" date="1598443200">- Update to version 1.11.3.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.3-1" date="1599825600">- Update to upstream version 1.11.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.3-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.3-4" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.3-5" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11.3-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d281684ffccd5218f917627d34a47bb9e276a25b64e8d255f75b00fb0a57286c" name="maven-dependency-analyzer-javadoc" arch="noarch">
  <version epoch="0" ver="1.12.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.2-1" date="1598356800">- Update to upstream version 1.11.2</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.11.3-1" date="1598443200">- Update to version 1.11.3.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11.3-1" date="1599825600">- Update to upstream version 1.11.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.3-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11.3-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.3-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.3-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.11.3-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.12.0-1" date="1650974400">- Update to upstream version 1.12.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="9e0797461417d94c4fed93d3c5b1e86a8d4c5f8ba77d2983a5222b044ec909e6" name="maven-dependency-analyzer-javadoc" arch="noarch">
  <version epoch="0" ver="1.13.2" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.12.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.13.2-1" date="1692100800">- Update to upstream version 1.13.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.13.2-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.2-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.13.2-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.13.2-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.13.2-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.13.2-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.13.2-15" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="170c2f88d50d830551d55b02c3ca19d29cb2cbbf4cb8d96ab691bef99bfc044a" name="maven-dependency-plugin" arch="noarch">
  <version epoch="0" ver="3.1.2" rel="9.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.1.2-1" date="1588852800">- Update to version 3.1.2.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.2-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.1.2-4" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.1.2-1" date="1598356800">- Update to upstream version 3.1.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.2-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.2-7" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.2-8" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.2-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="182ab6c2114ab38bf4891c4c59bc5e88acfb9e408068ebbed7c595579d8d618e" name="maven-dependency-plugin" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.1.2-4" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.1.2-1" date="1598356800">- Update to upstream version 3.1.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.2-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-8" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.2-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-1" date="1650801600">- Update to upstream version 3.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="be9bd98ef6781ef5a6a638ceee56744b7612fab99330c31ae7376cdd2cc02d21" name="maven-dependency-plugin" arch="noarch">
  <version epoch="0" ver="3.6.1" rel="13.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-1" date="1706788800">- Update to upstream version 3.6.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-5" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-11" date="1734523200">- Remove dependency on apache-commons-lang3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-12" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="66ae89b5904ee644daaf58492a36e947de74f0af4197b0d008ee5435297ba91b" name="maven-dependency-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.1.2" rel="9.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.1.2-1" date="1588852800">- Update to version 3.1.2.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.2-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.1.2-4" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.1.2-1" date="1598356800">- Update to upstream version 3.1.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.2-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.2-7" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.2-8" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.2-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5fe37613093f91148943239932a7d7bc69f33d513c46f96ccdeaa8fffca9f04a" name="maven-dependency-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.1.2-4" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.1.2-1" date="1598356800">- Update to upstream version 3.1.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.2-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-8" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.2-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-1" date="1650801600">- Update to upstream version 3.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="fede5ef9977b277437f72c9ba1cb5e5d7c21b7f6103ab58d12720978b1bd53af" name="maven-dependency-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.6.1" rel="13.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-1" date="1706788800">- Update to upstream version 3.6.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-5" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-11" date="1734523200">- Remove dependency on apache-commons-lang3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.1-12" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="02997c223d624bcfa856233254758f9aaaa7140edddc9e73cf0189c2fd895fa6" name="maven-dependency-tree" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-8" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-9" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.1-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-1" date="1650801600">- Update to upstream version 3.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="74fd09f83ec8ea230d6589b48546eca22eaaa9842eaabdca5171844eeeeb843f" name="maven-dependency-tree" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.1-1" date="1692100800">- Update to upstream version 3.2.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.1-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.1-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.1-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.1-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.1-15" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="3c0ca01d0f805e907766ad28b9823f50069260f49a9672ba366b393d13c98273" name="maven-dependency-tree-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="10.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-3" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.1-4" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-8" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-9" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.1-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="bd5bffab1b925157e2c5c178dec035736ed281049ec15542b1d1dbef98c2c454" name="maven-dependency-tree-javadoc" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-8" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.1-9" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.1-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-1" date="1650801600">- Update to upstream version 3.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="66527ab32c0c0c313b4aa06eb61fac7e39ecf305343b5222c55db29af95a7bff" name="maven-dependency-tree-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.1-1" date="1692100800">- Update to upstream version 3.2.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.1-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.1-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.1-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.1-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.1-15" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e85316d4d2c50bfd9c8d8d5e5f4b225c13da5be508f3c756a8ac967604e0fab0" name="maven-enforcer" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M3-1" date="1620993600">- Update to upstream version 3.0.0~M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M3-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-1" date="1650801600">- Update to upstream version 3.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-3" date="1652184000">- Remove obsolete patches</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="2f0b00dd340ee14f298cc060b1ad73499924c0a03e329be4fa2a5e2c8e808f6a" name="maven-enforcer" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-1" date="1706788800">- Update to upstream version 3.4.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-5" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-1" date="1724414400">- Update to upstream version 3.5.0
- Resolves: rhbz#2283957</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-3" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="e322df3fbaefe22d71e10053ac4abd729b28ba981531fc6dbbe4b411301c3d61" name="maven-enforcer-api" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M3-1" date="1620993600">- Update to upstream version 3.0.0~M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M3-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-1" date="1650801600">- Update to upstream version 3.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-3" date="1652184000">- Remove obsolete patches</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="94a1e88b1f70c3756a354dab84206109f55f33cb2a544fc36972d991a7f523dd" name="maven-enforcer-api" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-1" date="1706788800">- Update to upstream version 3.4.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-5" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-1" date="1724414400">- Update to upstream version 3.5.0
- Resolves: rhbz#2283957</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-3" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="0baf85651a6ab308d359b89da7fec98090a2304e772548d93a33a9c1bb5bc8d2" name="maven-enforcer-extension" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M3-1" date="1620993600">- Update to upstream version 3.0.0~M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M3-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-1" date="1650801600">- Update to upstream version 3.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-3" date="1652184000">- Remove obsolete patches</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="b1d55ff971e19aec584805ed0daf89b122e487b74baeeb310daa6cf3f7f04177" name="maven-enforcer-extension" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-1" date="1706788800">- Update to upstream version 3.4.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-5" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-1" date="1724414400">- Update to upstream version 3.5.0
- Resolves: rhbz#2283957</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-3" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="89d9e1a25dbf179f48139a1ec919d8359dce450500c8e534c2572bdc5df34651" name="maven-enforcer-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M3-1" date="1620993600">- Update to upstream version 3.0.0~M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M3-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-1" date="1650801600">- Update to upstream version 3.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-3" date="1652184000">- Remove obsolete patches</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="9c791a70d8280ce1aa302fc67df6e06ed733933f75978c7468d0ec466f6252a4" name="maven-enforcer-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.0~M3" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M2-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.0.0~M3-1" date="1588852800">- Update to version 3.0.0-M3.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M3-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M3-1" date="1620993600">- Update to upstream version 3.0.0~M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M3-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M3-6" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M3-7" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.0~M3-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="663e6ff2b458a0da5943bafe5a06ea764bb43b5921f963a3cca789085d3bd122" name="maven-enforcer-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-1" date="1706788800">- Update to upstream version 3.4.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-5" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-1" date="1724414400">- Update to upstream version 3.5.0
- Resolves: rhbz#2283957</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-3" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="d254e57522ae174125d546d54cf18b2d419cf8d9cd82b64506931e37faad21c3" name="maven-enforcer-plugin" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M3-1" date="1620993600">- Update to upstream version 3.0.0~M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M3-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-1" date="1650801600">- Update to upstream version 3.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-3" date="1652184000">- Remove obsolete patches</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5cd3510543a05e9d59ac9f58ecb72aa0306e2763939f41224b04d9389304d408" name="maven-enforcer-plugin" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-1" date="1706788800">- Update to upstream version 3.4.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-5" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-1" date="1724414400">- Update to upstream version 3.5.0
- Resolves: rhbz#2283957</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-3" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="c02941ef38bfa69ec674cba16dc8ff3385435816f16b80c977d2a8649b6e918a" name="maven-enforcer-rules" arch="noarch">
  <version epoch="0" ver="3.0.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M3-1" date="1620993600">- Update to upstream version 3.0.0~M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M3-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M3-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M3-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-1" date="1650801600">- Update to upstream version 3.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-3" date="1652184000">- Remove obsolete patches</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5ef29eeab795fcf76d30c24fc2a719a575fd4480ec265d5b8fa6612f7ae9427c" name="maven-enforcer-rules" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-1" date="1706788800">- Update to upstream version 3.4.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-5" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-1" date="1724414400">- Update to upstream version 3.5.0
- Resolves: rhbz#2283957</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-3" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="0b9aa4cede95b0ff0f8ed52b39e1b62177d635b3d5c77ca7d2ee8a4efc3af835" name="maven-failsafe-plugin" arch="noarch">
  <version epoch="0" ver="3.0.0~M4" rel="5.el9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:2.22.0-8" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.22.0-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.22.0-10" date="1608033600">- Add boolean dependencies between plugin and provider subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.22.0-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.0.0~M4-1" date="1612526400">- Update to version 3.0.0-M4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-1" date="1620993600">- Update to upstream version 3.0.0~M4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.0~M4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ccd3a6646317a9538fbafbf0137130092aed727bb5d10a96afd5f56f1c2f55ee" name="maven-failsafe-plugin" arch="noarch">
  <version epoch="0" ver="3.0.0~M6" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.0.0~M4-1" date="1612526400">- Update to version 3.0.0-M4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-1" date="1620993600">- Update to upstream version 3.0.0~M4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-4" date="1636459200">- Port to TestNG 7.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M4-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-1" date="1650542400">- Update to upstream 3.0.0-M6 milestone snapshot</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-2" date="1651147200">- Remove workaround for maven-plugin-tools issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="b54b1faf021959a46ad21f45a5d77302e23eabb6b76c3e76925d7464cf2859c3" name="maven-failsafe-plugin" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-7" date="1693656000">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.2-1" date="1702468800">- Update to upstream version 3.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-14" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="568f7a0f256d5c871a3394505a6126534b09f5056e83f963b1231a207b46d687" name="maven-file-management" arch="noarch">
  <version epoch="1" ver="3.0.0" rel="18.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-13" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-14" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-15" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-16" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:3.0.0-17" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-18" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="486ea653dfc03b2a44e53f8b26ac3951c215d82ad5f507b69c89871bd0e3a821" name="maven-file-management" arch="noarch">
  <version epoch="1" ver="3.1.0" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.0-1" date="1692273600">- Update to upstream version 3.1.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.1.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.1.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.1.0-5" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:3.1.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.1.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.0-12" date="1724414400">- Use upstream Java compiler source/target/release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.0-13" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.0-14" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="a0ece35e67ebacdda4e0828939a324a80bc63a2e5ee8ed16c7467162636289ae" name="maven-file-management-javadoc" arch="noarch">
  <version epoch="1" ver="3.0.0" rel="16.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-7" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:3.0.0-10" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-13" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-14" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-15" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:3.0.0-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="db9ecf6593575c2f72e29c13e309f1c625cdf76c6ed4804a57e35095b02faee8" name="maven-file-management-javadoc" arch="noarch">
  <version epoch="1" ver="3.0.0" rel="18.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-13" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-14" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-15" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-16" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:3.0.0-17" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-18" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="93f17b88ed317343dc5822ba65316039ade232772f024afb9067c1003d6c1da1" name="maven-file-management-javadoc" arch="noarch">
  <version epoch="1" ver="3.1.0" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.0-1" date="1692273600">- Update to upstream version 3.1.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.1.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.1.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.1.0-5" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:3.1.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.1.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.0-12" date="1724414400">- Use upstream Java compiler source/target/release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.0-13" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.1.0-14" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="6bdb099f876826bc9665dd040f81189774ac3fcf0edf3bc9dd43c6614266c8ed" name="maven-filtering" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.1-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.0-1" date="1597147200">- Update to version 3.2.0.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.0-1" date="1598443200">- Update to upstream version 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-6" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="276250b881f3cf4e327a7d8da72d6776654d30ae57d749a04f67cada9d1bd8d2" name="maven-filtering" arch="noarch">
  <version epoch="0" ver="3.3.2" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-1" date="1692273600">- Update to upstream version 3.3.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.1-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.1-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-7" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.2-1" date="1724414400">- Update to upstream version 3.3.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.2-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="40d0bee68c1bc8542a4e43f92e524da8f8439e27dab360ebcce835d8ff861a5d" name="maven-filtering-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="6.el9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.1-10" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.1-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.0-1" date="1597147200">- Update to version 3.2.0.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.0-1" date="1598443200">- Update to upstream version 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-4" date="1623240000">- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-5" date="1623240001">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a2365ee2087fd57d062603d3280f243018e1e621ce0c013d9f5c5c0192c09e72" name="maven-filtering-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.1-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.0-1" date="1597147200">- Update to version 3.2.0.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.0-1" date="1598443200">- Update to upstream version 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-6" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a1be2bc74df40d55d0a828b56e443d1e3139773b00de148cf28c7d0c0391615e" name="maven-filtering-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.2" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-1" date="1692273600">- Update to upstream version 3.3.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.1-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.1-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-7" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.2-1" date="1724414400">- Update to upstream version 3.3.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.2-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="6f3efb6069e7d7ff1c7005de3d83a43c99de666d4e2a5d4e5be112444cc4d62a" name="maven-jar-plugin" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-8" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-1" date="1650974400">- Update to upstream version 3.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="52ea3180e4dcf11b0ebc4660871f7356c9ad28604ce9a4e345fb24de2297fc9e" name="maven-jar-plugin" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="14.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-1" date="1692273600">- Update to upstream version 3.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-13" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="decbb8e66175d980438161bcc7358f445a02fc1117f04584e94d743aa38270dd" name="maven-jar-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="9.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.2-3" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.0-1" date="1574251200">- Update to upstream version 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-3" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-7" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-8" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.0-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d145e9225548b7bc8d82ac541785ac2949a8973d04e814f87247c93543293919" name="maven-jar-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-8" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-1" date="1650974400">- Update to upstream version 3.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="b67410ceef775fa7e166863ff4e75867a8e825b1ea9a1e6b3364ad807e5ba9ff" name="maven-jar-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="14.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-1" date="1692273600">- Update to upstream version 3.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-13" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="595ccc61cc20d8c9d3aff199868f7ebc9a35096454b01ad21988380f35f36ec4" name="maven-javadoc" arch="noarch">
  <version epoch="1" ver="3.6.3" rel="23.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-16" date="1729166400">- Add maven-openjdk21
- Resolves: RHEL-62407</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-16" date="1729166401">- Suggest maven-openjdk17
- Resolves: RHEL-62398</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-17" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-18" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-19" date="1732363200">- Switch to Fedora tests</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-20" date="1732363201">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-21" date="1732363202">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-22" date="1734004800">- Implement new non-conflicting Java bindings
- Resolves: RHEL-54068, RHEL-54070, RHEL-54071, RHEL-54072</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-23" date="1764849600">- Add maven-openjdk25 binding</changelog>
</package>
<package pkgid="d0ec21c3dd33381d9eee50d3b65ccff083d752c90c2a7471577de56a73d102fc" name="maven-javadoc" arch="noarch">
  <version epoch="1" ver="3.8.5" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-11" date="1632484800">- Create a symlink to jansi shared object
- Related: rhbz#1994935</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-12" date="1632484801">- Add OpenJDK 17 binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-13" date="1635854400">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-14" date="1636113600">- Do not override JAVA_HOME set by user
- Resolves: rhbz#2020478</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.8.4-1" date="1639742400">- Update to upstream version 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.4-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.4-3" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-1" date="1650542400">- Update to upstream version 3.8.5</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.5-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e620d2b58c40f9e62b1a1f65bd4261e6f1b8827d2d285f73395d03e79c720e0e" name="maven-javadoc" arch="noarch">
  <version epoch="1" ver="3.8.5" rel="6.module_el9.4.0+85+46348494"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-1" date="1650542400">- Update to upstream version 3.8.5</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.5-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-4" date="1675339200">- Turn hard dependency on java-devel into a weak dependencny
- Resolves: rhbz#2165595</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:3.8.5-5" date="1705924800">- Add OpenJDK 21 binding
- Related: RHEL-13046</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-6" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="aa6cf2e0c315c19b311f3fca8c5cf349a1c618a700acb2fcff73c1553b05cba3" name="maven-javadoc" arch="noarch">
  <version epoch="1" ver="3.9.9" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-1" date="1724414400">- Update to upstream version 3.9.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-2" date="1727265600">- Drop bindings for OpenJDK &lt; 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-3" date="1727265601">- Update gating.yaml</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-4" date="1730289600">- Expect JVMs in %_jvmdir instead of %_jvmlibdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-6" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-8" date="1732536000">- Exclude maven-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-9" date="1732536001">- Add test plan for maven-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-11" date="1733140800">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-12" date="1733140801">- Reuse jlink image if it already exists</changelog>
</package>
<package pkgid="df1ca534c825afe963440244787a04b6c387aeeab5db86a27b3ec72880fb19fc" name="maven-javadoc" arch="noarch">
  <version epoch="1" ver="3.9.9" rel="13.module_el9.8.0+229+787fb9a7"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-2" date="1727265600">- Drop bindings for OpenJDK &lt; 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-3" date="1727265601">- Update gating.yaml</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-4" date="1730289600">- Expect JVMs in %_jvmdir instead of %_jvmlibdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-6" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-8" date="1732536000">- Exclude maven-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-9" date="1732536001">- Add test plan for maven-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-11" date="1733140800">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-12" date="1733140801">- Reuse jlink image if it already exists</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.9.9-13" date="1767787200">- Add maven-openjdk25 binding</changelog>
</package>
<package pkgid="7a13f93a4d865c4cfcaea0e0ef18bf79d80918f661beb515ee7a2ede1460d38c" name="maven-lib" arch="noarch">
  <version epoch="1" ver="3.8.5" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-11" date="1632484800">- Create a symlink to jansi shared object
- Related: rhbz#1994935</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-12" date="1632484801">- Add OpenJDK 17 binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-13" date="1635854400">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-14" date="1636113600">- Do not override JAVA_HOME set by user
- Resolves: rhbz#2020478</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.8.4-1" date="1639742400">- Update to upstream version 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.4-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.4-3" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-1" date="1650542400">- Update to upstream version 3.8.5</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.5-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="81d9b60e998510557bc8c15276567f1843a872a898631cf64a0e22505ca15a73" name="maven-lib" arch="noarch">
  <version epoch="1" ver="3.9.9" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-1" date="1724414400">- Update to upstream version 3.9.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-2" date="1727265600">- Drop bindings for OpenJDK &lt; 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-3" date="1727265601">- Update gating.yaml</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-4" date="1730289600">- Expect JVMs in %_jvmdir instead of %_jvmlibdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-6" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-8" date="1732536000">- Exclude maven-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-9" date="1732536001">- Add test plan for maven-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-11" date="1733140800">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-12" date="1733140801">- Reuse jlink image if it already exists</changelog>
</package>
<package pkgid="404dcfbdec814890cc596afa12288c1bd3b803e8359aed076f0c6a57c6d99f0a" name="maven-local" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.module_el9.2.0+25+b1421c1d.alma"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-7" date="1643284800">- Switch to OpenJDK 17 as default JDK/JRE</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-8" date="1651752000">- Install toolchains.xml in correct location in bootstrap mode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.0.0-9" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-10" date="1655208000">- Introduce javapackages-extra and javapackages-common subpackages
- Drop metadata for com.sun:tools and sun.jdk:jconsole
- Re-enable tests
- Re-add manpages
- Drop bootstrap mode</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-1" date="1655985600">- Update to upstream version 6.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.1.0-2" date="1657281600">- Rebuilt for Drop i686 JDKs</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-3" date="1658145600">- Drop ExclusiveArch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.1.0-4.alma" date="1681128000">- Add generated Requires on multiple versions of java-headless</changelog>
</package>
<package pkgid="fa281bd14808bc862ef2c161dc75b45af12172f755d2c5158bbf4019bb5ffb3a" name="maven-local-openjdk11" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.module_el9.2.0+25+b1421c1d.alma"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-7" date="1643284800">- Switch to OpenJDK 17 as default JDK/JRE</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-8" date="1651752000">- Install toolchains.xml in correct location in bootstrap mode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.0.0-9" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-10" date="1655208000">- Introduce javapackages-extra and javapackages-common subpackages
- Drop metadata for com.sun:tools and sun.jdk:jconsole
- Re-enable tests
- Re-add manpages
- Drop bootstrap mode</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-1" date="1655985600">- Update to upstream version 6.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.1.0-2" date="1657281600">- Rebuilt for Drop i686 JDKs</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-3" date="1658145600">- Drop ExclusiveArch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.1.0-4.alma" date="1681128000">- Add generated Requires on multiple versions of java-headless</changelog>
</package>
<package pkgid="a806084744121a027feaad17a1d9c5201fea5529ac19e5e9464d031116c6b2ca" name="maven-local-openjdk11" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="bc18810254a99e62548cd92e347afb201f66635e0b46ed641d698c46a447a7ca" name="maven-local-openjdk17" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.module_el9.2.0+25+b1421c1d.alma"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-7" date="1643284800">- Switch to OpenJDK 17 as default JDK/JRE</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-8" date="1651752000">- Install toolchains.xml in correct location in bootstrap mode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.0.0-9" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-10" date="1655208000">- Introduce javapackages-extra and javapackages-common subpackages
- Drop metadata for com.sun:tools and sun.jdk:jconsole
- Re-enable tests
- Re-add manpages
- Drop bootstrap mode</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-1" date="1655985600">- Update to upstream version 6.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.1.0-2" date="1657281600">- Rebuilt for Drop i686 JDKs</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-3" date="1658145600">- Drop ExclusiveArch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.1.0-4.alma" date="1681128000">- Add generated Requires on multiple versions of java-headless</changelog>
</package>
<package pkgid="6cd792f401f9625ffc227a04e4b69f864c4625fc972e22355499d4322a6461c3" name="maven-local-openjdk17" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="4698e2f0528b8e55f29b0ae5ff9dc31d81b1800d8e6135551190ca42259e62eb" name="maven-local-openjdk21" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="05ec32afe8c4e0364875c9c39f16237af3ea32592645e923d494c7ce339c6036" name="maven-local-openjdk8" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.module_el9.2.0+25+b1421c1d.alma"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-7" date="1643284800">- Switch to OpenJDK 17 as default JDK/JRE</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-8" date="1651752000">- Install toolchains.xml in correct location in bootstrap mode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.0.0-9" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-10" date="1655208000">- Introduce javapackages-extra and javapackages-common subpackages
- Drop metadata for com.sun:tools and sun.jdk:jconsole
- Re-enable tests
- Re-add manpages
- Drop bootstrap mode</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-1" date="1655985600">- Update to upstream version 6.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.1.0-2" date="1657281600">- Rebuilt for Drop i686 JDKs</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-3" date="1658145600">- Drop ExclusiveArch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.1.0-4.alma" date="1681128000">- Add generated Requires on multiple versions of java-headless</changelog>
</package>
<package pkgid="5bb82bc21b80265bdfab6c1e3bc6f82d57f045e546e9b2939520e14e38afdec7" name="maven-local-openjdk8" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="e57000fa5dc993fde4f85c2e4b507c0386b19e015f920cfd8c0c20b03b5e165b" name="maven-openjdk11" arch="noarch">
  <version epoch="1" ver="3.8.5" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-11" date="1632484800">- Create a symlink to jansi shared object
- Related: rhbz#1994935</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-12" date="1632484801">- Add OpenJDK 17 binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-13" date="1635854400">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-14" date="1636113600">- Do not override JAVA_HOME set by user
- Resolves: rhbz#2020478</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.8.4-1" date="1639742400">- Update to upstream version 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.4-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.4-3" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-1" date="1650542400">- Update to upstream version 3.8.5</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.5-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="ff208bfe09d5b1e1c8d4d42c9463f8701ee48def8904a584eb8c1c3d6fbbc0c7" name="maven-openjdk11" arch="noarch">
  <version epoch="1" ver="3.9.9" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-1" date="1724414400">- Update to upstream version 3.9.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-2" date="1727265600">- Drop bindings for OpenJDK &lt; 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-3" date="1727265601">- Update gating.yaml</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-4" date="1730289600">- Expect JVMs in %_jvmdir instead of %_jvmlibdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-6" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-8" date="1732536000">- Exclude maven-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-9" date="1732536001">- Add test plan for maven-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-11" date="1733140800">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-12" date="1733140801">- Reuse jlink image if it already exists</changelog>
</package>
<package pkgid="30065993095284300d705446542e9d943bcb4d74f3cc75410fe9fc8afa3e11b5" name="maven-openjdk17" arch="noarch">
  <version epoch="1" ver="3.8.5" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-11" date="1632484800">- Create a symlink to jansi shared object
- Related: rhbz#1994935</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-12" date="1632484801">- Add OpenJDK 17 binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-13" date="1635854400">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-14" date="1636113600">- Do not override JAVA_HOME set by user
- Resolves: rhbz#2020478</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.8.4-1" date="1639742400">- Update to upstream version 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.4-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.4-3" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-1" date="1650542400">- Update to upstream version 3.8.5</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.5-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="c657a2e2617e4b00ea164d06799656918cf8c0dc3fe5e78d9a9a385b0dae1638" name="maven-openjdk17" arch="noarch">
  <version epoch="1" ver="3.9.9" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-1" date="1724414400">- Update to upstream version 3.9.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-2" date="1727265600">- Drop bindings for OpenJDK &lt; 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-3" date="1727265601">- Update gating.yaml</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-4" date="1730289600">- Expect JVMs in %_jvmdir instead of %_jvmlibdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-6" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-8" date="1732536000">- Exclude maven-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-9" date="1732536001">- Add test plan for maven-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-11" date="1733140800">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-12" date="1733140801">- Reuse jlink image if it already exists</changelog>
</package>
<package pkgid="2e39e146e01cca7cba55f965117f3390d23d9d87a95a55dfa87944eab3e7fe77" name="maven-openjdk21" arch="noarch">
  <version epoch="1" ver="3.9.9" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-1" date="1724414400">- Update to upstream version 3.9.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-2" date="1727265600">- Drop bindings for OpenJDK &lt; 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-3" date="1727265601">- Update gating.yaml</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-4" date="1730289600">- Expect JVMs in %_jvmdir instead of %_jvmlibdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-6" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-8" date="1732536000">- Exclude maven-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-9" date="1732536001">- Add test plan for maven-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-11" date="1733140800">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-12" date="1733140801">- Reuse jlink image if it already exists</changelog>
</package>
<package pkgid="e2d77ffdd1a2070ae3a3cff28a157afeb0aa2c12a31c417b16c64bec0badf6c2" name="maven-openjdk8" arch="noarch">
  <version epoch="1" ver="3.8.5" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.6.3-11" date="1632484800">- Create a symlink to jansi shared object
- Related: rhbz#1994935</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-12" date="1632484801">- Add OpenJDK 17 binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-13" date="1635854400">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.6.3-14" date="1636113600">- Do not override JAVA_HOME set by user
- Resolves: rhbz#2020478</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.8.4-1" date="1639742400">- Update to upstream version 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.4-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.4-3" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-1" date="1650542400">- Update to upstream version 3.8.5</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.8.5-2" date="1651752000">- Add build-dependency on extra-enforcer-rules</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.8.5-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="035bad9911d1438e2bba9dba506dd00fa8d21299c756215268f3bdaa8b30c324" name="maven-openjdk8" arch="noarch">
  <version epoch="1" ver="3.9.9" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-1" date="1724414400">- Update to upstream version 3.9.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-2" date="1727265600">- Drop bindings for OpenJDK &lt; 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-3" date="1727265601">- Update gating.yaml</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-4" date="1730289600">- Expect JVMs in %_jvmdir instead of %_jvmlibdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-6" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-8" date="1732536000">- Exclude maven-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-9" date="1732536001">- Add test plan for maven-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-11" date="1733140800">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-12" date="1733140801">- Reuse jlink image if it already exists</changelog>
</package>
<package pkgid="c45dd96bf456bcced449175e2534927bac6108f458af6e753e3962e135a2619b" name="maven-parent" arch="noarch">
  <version epoch="0" ver="34" rel="10.el9"/>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 34-2" date="1585137600">- Remove explicit requirement on maven-plugin-tools-javadoc</changelog>
  <changelog author="Severin Gehwolf &lt;sgehwolf@redhat.com&gt; - 34-3" date="1585310400">- Remove javadoc taglet configuration which is not longer available</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 34-1" date="1592827200">- Update to upstream version 34</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 34-4" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 34-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 34-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 34-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 34-8" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 34-9" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 34-10" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cafc8aad5dd21fd2cf388143d3338bf54b62995600be092c1cdda7ff6cb1545b" name="maven-parent" arch="noarch">
  <version epoch="0" ver="35" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 34-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 34-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 34-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 34-8" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 34-9" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 34-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 35-1" date="1650542400">- Update to upstream version 35</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 35-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="d36c9ec18d7785717155a2bd032ae2cb3123f4950a8ef31a0cac9032c29a4c2e" name="maven-parent" arch="noarch">
  <version epoch="0" ver="43" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 40-1" date="1692187200">- Update to upstream version 40</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 40-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 41-1" date="1701691200">- Update to upstream version 41</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 41-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 41-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 41-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 41-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 41-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 43-1" date="1724414400">- Update to upstream version 43
- Resolves: rhbz#2296838</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 43-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="ac5a1b4c2a42de2e267ccfc36eb6bf21f560bba72fcd395bd13bea40cab62a57" name="maven-plugin-annotations" arch="noarch">
  <version epoch="0" ver="3.6.4" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.6.0-7" date="1598097600">- Disable unused ant scripting support.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.4-1" date="1651147200">- Update to upstream version 3.6.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.4-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5d461ba3444e597e1c9ad2b76bc55ba8ca74d196c416cccda2e971ebf97ad1da" name="maven-plugin-annotations" arch="noarch">
  <version epoch="0" ver="3.9.0" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.9.0-1" date="1692187200">- Update to upstream version 3.9.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-8" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-16" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-17" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="34b268c3167f8467ad379089389cb26988a833759db6fdfcfc1d401172ebda24" name="maven-plugin-build-helper" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.0-1" date="1595332800">- Update to version 3.2.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-4" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-5" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-1" date="1651665600">- Update to upstream version 3.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="f24db4ae63bc8419fa77fc61b030e426b3bed996f11a6f66381b49b0e72b83c7" name="maven-plugin-build-helper-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="7.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.0-1" date="1592827200">- Update to upstream version 3.2.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.0-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.0-1" date="1595332800">- Update to version 3.2.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-4" date="1621252801">- Bump release</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-5" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-6" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.0-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="66b2c5c9d904bb6c531fbd27b00ab57f4ebbba8dff91fd6bc3cea42f251952e1" name="maven-plugin-build-helper-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.0-1" date="1595332800">- Update to version 3.2.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-4" date="1621252801">- Bump release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-5" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-1" date="1651665600">- Update to upstream version 3.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5a79f2a3e6ea3776d098365838ed4f2403a173c95e1453dfbbbac3e6a1df7dd1" name="maven-plugin-bundle" arch="noarch">
  <version epoch="0" ver="5.1.1" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.1.1-1" date="1598443200">- Update to upstream version 5.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.1-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-6" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="8205a363ef9559a5fe8057b671670ade0bcce935222645f34b17157b238e6bf4" name="maven-plugin-bundle-javadoc" arch="noarch">
  <version epoch="0" ver="5.1.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 4.2.1-1" date="1589630400">- Update to version 4.2.1.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.1-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.1.1-1" date="1598443200">- Update to upstream version 5.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.1-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.1-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.1.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1051dbe19e934d2f3d967aeb7ef9f51c92a9634b593dd12885557c0dfaedc84e" name="maven-plugin-bundle-javadoc" arch="noarch">
  <version epoch="0" ver="5.1.1" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.1.1-1" date="1598443200">- Update to upstream version 5.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.1.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.1.1-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.1.1-6" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="46ec2ac06bc9f08eb5f7383a9663ff93c9dc5232bdd4052c745044b80cc6e49e" name="maven-plugin-plugin" arch="noarch">
  <version epoch="0" ver="3.6.4" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.6.0-7" date="1598097600">- Disable unused ant scripting support.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.4-1" date="1651147200">- Update to upstream version 3.6.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.4-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="ae4252a1b9dcd502a045f6b74ed586def7b107bb4c008bf186cc0b2434a993bf" name="maven-plugin-plugin" arch="noarch">
  <version epoch="0" ver="3.9.0" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.9.0-1" date="1692187200">- Update to upstream version 3.9.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-8" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-16" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-17" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="d74a6f348ab732876c28a6611f143cc28f7847f8d730fd8bb601f72b39b1911c" name="maven-plugin-testing" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="26.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-18" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-19" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-21" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-22" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-23" date="1641384000">- Port to maven 3.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-24" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-25" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-26" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="7fce17e7b4f390cdca3251bf9c5b33357137112ee931672465dd3d3ed5d836b5" name="maven-plugin-testing" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="51.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-29" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-30" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-31" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-32" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-33" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-34" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-35" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-48" date="1724414400">- Fix Maven compiler target setting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-49" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="9335ff487bd5c684e429f9e6ca3c47e7a91756b4a28fd41ff3d7dd37c7944735" name="maven-plugin-testing-harness" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="26.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-18" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-19" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-21" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-22" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-23" date="1641384000">- Port to maven 3.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-24" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-25" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-26" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="bf27eecd8f1d15fd9fa0c6a3dce3084471829112406c9679cd004fae27ed9edd" name="maven-plugin-testing-harness" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="51.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-29" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-30" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-31" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-32" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-33" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-34" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-35" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-48" date="1724414400">- Fix Maven compiler target setting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-49" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="bdfadb89676eafa7f708abc3bbdd6908ff40c142ab529f53efd114e10fa7c4ce" name="maven-plugin-testing-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="23.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-14" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-16" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-17" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-18" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-19" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-21" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-22" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.0-23" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="abb873a694a223dab262ac7f1ad4ad90a1a96b970e635e7e05b035d81cd75e2d" name="maven-plugin-testing-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="26.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-18" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-19" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-21" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-22" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-23" date="1641384000">- Port to maven 3.8.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-24" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-25" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-26" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e682d25bee0c0f51f6773fb7b884aa31bbe71ff87c220e1db7d44cf804f158a8" name="maven-plugin-testing-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="51.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-29" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-30" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-31" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.0-32" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-33" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-34" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-35" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-48" date="1724414400">- Fix Maven compiler target setting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-49" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="cdff1cd9870a081d2683f8607754aa82c4f558b13530d967909d690a78cd3251" name="maven-plugin-tools" arch="noarch">
  <version epoch="0" ver="3.6.4" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.6.0-7" date="1598097600">- Disable unused ant scripting support.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.4-1" date="1651147200">- Update to upstream version 3.6.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.4-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="62f769236b4d4b2c24ec85b7720ed88c31862773062dd216871fff3024c67c07" name="maven-plugin-tools" arch="noarch">
  <version epoch="0" ver="3.9.0" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.9.0-1" date="1692187200">- Update to upstream version 3.9.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-8" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-16" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-17" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="4c338e2681ee4a421c6c71e62c5aaba584d6bde6adb393cf138b149909f263dc" name="maven-plugin-tools-annotations" arch="noarch">
  <version epoch="0" ver="3.6.4" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.6.0-7" date="1598097600">- Disable unused ant scripting support.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.4-1" date="1651147200">- Update to upstream version 3.6.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.4-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e92f378dd2c5748455fe401a15ed5837d93b1adb499c1fa9f6a0012f907a0389" name="maven-plugin-tools-annotations" arch="noarch">
  <version epoch="0" ver="3.9.0" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.9.0-1" date="1692187200">- Update to upstream version 3.9.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-8" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-16" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-17" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="3a4ed83f4534533ad59c5aaa5e35e5a7e9e62a3a4bf7fd929fc6211c7700963b" name="maven-plugin-tools-api" arch="noarch">
  <version epoch="0" ver="3.6.4" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.6.0-7" date="1598097600">- Disable unused ant scripting support.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.4-1" date="1651147200">- Update to upstream version 3.6.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.4-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="f32088f1cc25f68a3cbd7a8a6a339959df4c33b8f3ca9eba2d87bc3ca01acba9" name="maven-plugin-tools-api" arch="noarch">
  <version epoch="0" ver="3.9.0" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.9.0-1" date="1692187200">- Update to upstream version 3.9.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-8" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-16" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-17" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="c83dfe96cd4da5f6731d3223cd5b768dd739a5650af5291ff125d548f3ab7e9a" name="maven-plugin-tools-generators" arch="noarch">
  <version epoch="0" ver="3.6.4" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.6.0-7" date="1598097600">- Disable unused ant scripting support.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.4-1" date="1651147200">- Update to upstream version 3.6.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.4-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="2d31aa134036a9e5ad7261b4369a9feb5b12330ae761b570aad9098a58c3ff32" name="maven-plugin-tools-generators" arch="noarch">
  <version epoch="0" ver="3.9.0" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.9.0-1" date="1692187200">- Update to upstream version 3.9.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-8" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-16" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-17" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="f5949b05485bf750234cc90ddb9c7c685529cf8c272c3cf51b4508d551722b11" name="maven-plugin-tools-java" arch="noarch">
  <version epoch="0" ver="3.6.4" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.6.0-7" date="1598097600">- Disable unused ant scripting support.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.4-1" date="1651147200">- Update to upstream version 3.6.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.4-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="27044e952774014a1a69d47918a8c28131f03f91af94c50d7e7d4dddba702ce5" name="maven-plugin-tools-java" arch="noarch">
  <version epoch="0" ver="3.9.0" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.9.0-1" date="1692187200">- Update to upstream version 3.9.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-8" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-16" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-17" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="245bb2139300499f8857bc292125846cd18146ad3c7af4223f2939655ef79d16" name="maven-plugin-tools-javadoc" arch="noarch">
  <version epoch="0" ver="3.9.0" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.9.0-1" date="1692187200">- Update to upstream version 3.9.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.9.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-8" date="1722340800">- Drop unneeded Obsoletes</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-16" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.9.0-17" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="980c40dbdd97dcd0e94557dbe45a0cc869ecf78218f80c3ed3c86dc44af921fd" name="maven-plugin-tools-javadocs" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-4" date="1587384000">- Disable beanshell modules</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.6.0-4" date="1589457600">- Ignore jTidy crashes when generating maven plugin descriptors.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:3.6.0-5" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.6.0-7" date="1598097600">- Disable unused ant scripting support.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-10" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-11" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.6.0-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9bcb87a8133133655580c6ca8b4982ebe3ac01971c2f2059534eeb2671d39e2b" name="maven-plugin-tools-javadocs" arch="noarch">
  <version epoch="0" ver="3.6.4" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.6.0-7" date="1598097600">- Disable unused ant scripting support.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.6.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.0-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.6.0-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.6.4-1" date="1651147200">- Update to upstream version 3.6.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.4-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="d4b127302172d34162f46e40829b760fe092cab4db983bf4f45a8bd11c1ea7e2" name="maven-remote-resources-plugin" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-6" date="1625745600">- Enable tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-8" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-10" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="6a443f8426512077060fde80f5fad461482ac812085dc683b297a581d1d74cf6" name="maven-remote-resources-plugin" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="14.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-1" date="1692792000">- Update to upstream version 3.1.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-13" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="9836c83cd74e4bcab9e002265e60a38da41ecca4d3099051090c2e9b1b91c00d" name="maven-remote-resources-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-6" date="1625745600">- Enable tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-8" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-10" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5ded20a35b5804b677cbf0e0605b9d6430d1164e19d5da5b5779477e98fe1d2a" name="maven-remote-resources-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.7.0-1" date="1589025600">- Update to version 1.7.0.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.0-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-6" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-7" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.0-8" date="1627214400">- Enable tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.0-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a78fc6713b77ce197add334beeb81854e8ecb6e805ed643bc222b3870ac92754" name="maven-remote-resources-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="14.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-12" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-1" date="1692792000">- Update to upstream version 3.1.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1.0-13" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="a8952b3ac92b46ce71ab5cf50ef1d89a084de900eeec50c12d1a4d52f5e30294" name="maven-resolver" arch="noarch">
  <version epoch="1" ver="1.7.3" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.6.1-3" date="1622548800">- Obsolete removed subpackages</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.6.1-4" date="1622548801">- Add epoch to obsoleted packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.1-5" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1:1.6.1-6" date="1633262400">- Enable transport-file and transport-http module</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.6.1-7" date="1635422400">- Remove use of deprecated SHA-1 and MD5 algorithms</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:1.7.3-1" date="1641556800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.3-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.3-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.7.3-4" date="1651233600">- Add aether-connector-wagon alias</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.3-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e6355a8cd446f1de128bd85859e9e6f6a9ad6fec673ab6b92cc2a45bb7fb936f" name="maven-resolver" arch="noarch">
  <version epoch="1" ver="1.9.22" rel="6.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.15-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.9.15-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.9.15-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.18-1" date="1706788800">- Update to upstream version 1.9.18</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.9.18-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.9.18-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.18-4" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.9.18-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.22-1" date="1724414400">- Update to upstream version 1.9.22</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.22-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="0b86eb069804df1de61f072b507e88c25e716eae2c1cb8230f9fcd4d45fae30c" name="maven-resolver-javadoc" arch="noarch">
  <version epoch="1" ver="1.6.1" rel="14.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.6.1-10" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:1.6.1-11" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:1.6.1-12" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:1.6.1-13" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:1.6.1-14" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="576722d66102bbdbae206020e383e71f1bd61ae945c8a9f12adca836257d3b8b" name="maven-resolver-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.3" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.6.1-3" date="1622548800">- Obsolete removed subpackages</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.6.1-4" date="1622548801">- Add epoch to obsoleted packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.6.1-5" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1:1.6.1-6" date="1633262400">- Enable transport-file and transport-http module</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.6.1-7" date="1635422400">- Remove use of deprecated SHA-1 and MD5 algorithms</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:1.7.3-1" date="1641556800">- Update to upstream version 1.7.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.3-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.3-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.7.3-4" date="1651233600">- Add aether-connector-wagon alias</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.3-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="ee06fd3604fae0fd5f75ccfa7086357ba9d676619bb008c3f1e9854a0ad9fcf0" name="maven-resolver-javadoc" arch="noarch">
  <version epoch="1" ver="1.7.3" rel="6.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.7.3-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.7.3-4" date="1651233600">- Add aether-connector-wagon alias</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.7.3-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.7.3-6" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="16e7cb111533b3fc15784ac43c67736c773bcf1742e8064873642ec775c31145" name="maven-resolver-javadoc" arch="noarch">
  <version epoch="1" ver="1.9.22" rel="6.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.15-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.9.15-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.9.15-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.18-1" date="1706788800">- Update to upstream version 1.9.18</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.9.18-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.9.18-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.18-4" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.9.18-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.22-1" date="1724414400">- Update to upstream version 1.9.22</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.22-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b3a2abff2c1961975711b2aa38f87d168ed3b2a5626ab215a8366ed3b22c3a94" name="maven-resolver-javadoc" arch="noarch">
  <version epoch="1" ver="1.9.22" rel="6.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.15-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.9.15-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.9.15-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.18-1" date="1706788800">- Update to upstream version 1.9.18</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.9.18-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:1.9.18-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.18-4" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.9.18-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.22-1" date="1724414400">- Update to upstream version 1.9.22</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.9.22-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e97af5dc8a1c0485f447fbe413d37497eca8f29d970d91198a22aee1a9432739" name="maven-resources-plugin" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.0-1" date="1597147200">- Update to version 3.2.0.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.0-1" date="1599825600">- Update to upstream version 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="ad4ac66dc3625af1a1035946672424eb328e7fe8cdd6c07067317e32a7a04990" name="maven-resources-plugin" arch="noarch">
  <version epoch="0" ver="3.3.1" rel="15.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-1" date="1692273600">- Update to upstream version 3.3.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.1-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.1-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-12" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1d52143644cae96d72d0ce1a747c459c49aeed2c3deb3e45025998626e4e3d8a" name="maven-resources-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1.0-7" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.0-1" date="1597147200">- Update to version 3.2.0.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.0-1" date="1599825600">- Update to upstream version 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-4" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-5" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1991fb9db801c21a6da86a84a2a65a855fde3820baf95a7df86f4c93cfecbdc0" name="maven-resources-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.0-1" date="1597147200">- Update to version 3.2.0.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.0-1" date="1599825600">- Update to upstream version 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-7" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="dc732fd941e2e8d4c675daab3734999a6d3d0a7df29a13a2607789ef12499a71" name="maven-resources-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.1" rel="15.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-8" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-9" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-1" date="1692273600">- Update to upstream version 3.3.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.1-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.1-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.1-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.1-12" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="f6e6e7acead35db96b8461a403dd66aed6abb0b762e0b7e10353eef458c3e6a6" name="maven-shade-plugin" arch="noarch">
  <version epoch="0" ver="3.2.4" rel="6.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.1-1" date="1566129600">- Update to version 3.2.1.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.1-2" date="1572782400">- Drop workaround for maven-artifact-transfer 0.11.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.3-1" date="1589025600">- Update to version 3.2.3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.4-1" date="1591617600">- Update to version 3.2.4.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.4-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.4-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.4-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="67c3d608434a6656066864f5c51705fdc1656661196868f2a37a6eafda32b9b8" name="maven-shade-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.4" rel="6.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.1-1" date="1566129600">- Update to version 3.2.1.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.1-2" date="1572782400">- Drop workaround for maven-artifact-transfer 0.11.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.3-1" date="1589025600">- Update to version 3.2.3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.4-1" date="1591617600">- Update to version 3.2.4.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.4-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.4-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.4-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.4-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.4-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="37901a112fab35ad7570a72a820dc21535a008060a6c5074bf3ce73278b14e02" name="maven-shared-incremental" arch="noarch">
  <version epoch="0" ver="1.1" rel="26.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-20" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-22" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-23" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-24" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-25" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-26" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="084c1a856acff6dfd5b2e2312721edc93f251da8295464f6d7bc0ae3a0ed75f8" name="maven-shared-incremental" arch="noarch">
  <version epoch="0" ver="1.1" rel="48.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-29" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-30" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-31" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-32" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-33" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-34" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-35" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-45" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1397aee9ee491b47fe94e7f47a304707a93224f363ec0b2f8b3a81bad4ed8dc3" name="maven-shared-incremental-javadoc" arch="noarch">
  <version epoch="0" ver="1.1" rel="25.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-16" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-18" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-17" date="1588248000">- Remove unneeded dependency on plexus-component-api</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-19" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-20" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-22" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-23" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-24" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1-25" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="06f256bc01d12b6eba55a1ecc3cd0940969333a0cb6ac9dae700d850ee260eeb" name="maven-shared-incremental-javadoc" arch="noarch">
  <version epoch="0" ver="1.1" rel="26.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-20" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-21" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-22" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-23" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-24" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-25" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-26" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="6a24c8f6cdac46fddcb1d34962e5e0cf1aefb111a9fda3e7b3fd6cb99ffed022" name="maven-shared-incremental-javadoc" arch="noarch">
  <version epoch="0" ver="1.1" rel="48.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-27" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-28" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-29" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-30" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-31" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-32" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1-33" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-34" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-35" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1-45" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b85cc532abfb55291bb3021029acbc1b240f5854522370ad54a58e3ec17e43df" name="maven-shared-io" arch="noarch">
  <version epoch="1" ver="3.0.0" rel="18.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-13" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-14" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-15" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-16" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:3.0.0-17" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-18" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="b3be4a1db23b4ccaa9d20db59b58ba41e5694737bef036769453f0a6a7a66fe9" name="maven-shared-io" arch="noarch">
  <version epoch="1" ver="3.0.0" rel="43.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-19" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-20" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-21" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-22" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-23" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.0.0-24" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:3.0.0-25" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-26" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-39" date="1724414400">- Fix Maven compiler target setting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-40" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="f95af0fc62fd5ad2df3a5ad9fa5b71dc4b3b15ebac56356a0f6564e37b092e9c" name="maven-shared-io-javadoc" arch="noarch">
  <version epoch="1" ver="3.0.0" rel="16.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-7" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-9" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:3.0.0-10" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-13" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-14" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-15" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:3.0.0-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="49c2ad3e1cf33d43d8bf655124adcb65c56fdf36eaa163deaf6d0bb79ddae5cc" name="maven-shared-io-javadoc" arch="noarch">
  <version epoch="1" ver="3.0.0" rel="18.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-13" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-14" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-15" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-16" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:3.0.0-17" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-18" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a9232a722865a80ae9c8cd93155008831635981aaee8c972dea8f5a5347e4b1a" name="maven-shared-io-javadoc" arch="noarch">
  <version epoch="1" ver="3.0.0" rel="43.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-19" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-20" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-21" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-22" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-23" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1:3.0.0-24" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:3.0.0-25" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:3.0.0-26" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-39" date="1724414400">- Fix Maven compiler target setting</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.0.0-40" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="9544471d1f1192fb9699c235fd0c86e8e09b5b635a3fb0dd815cf393a4e0f095" name="maven-shared-utils" arch="noarch">
  <version epoch="0" ver="3.3.4" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-0.7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.3-1" date="1599825600">- Update to upstream version 3.3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-0.8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.4-1" date="1624622400">- Update to upstream version 3.3.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.4-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.4-3" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.4-4" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.4-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5bc5f14c301c9210eb59dfada728d718fde415861657a78e7e137136783b164b" name="maven-shared-utils" arch="noarch">
  <version epoch="0" ver="3.4.2" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.4-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.4.2-1" date="1692187200">- Update to upstream version 3.4.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-17" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="d6e43269fe9cb24869c3d101d87d84028fd77f18415bb8e26dc86dbb140acbc8" name="maven-shared-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.4" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-0.7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.3-1" date="1599825600">- Update to upstream version 3.3.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-0.8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.3-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.3.4-1" date="1624622400">- Update to upstream version 3.3.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.4-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.4-3" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.4-4" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.4-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="ee3b729c4fc74d014d53ae6ad47a3771f2aacf5b8d8c4e7cad7c98bc5c3f1c54" name="maven-shared-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.4" rel="6.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.4-4" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.4-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.4-6" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="b15c58b73c17a83a6f774b2e27743271b655abf37762009a63de0b8e4e2137df" name="maven-shared-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.4" rel="7.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.4-3" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.4-4" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.4-5" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.4-6" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.4-7" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="677c3e0104cf116e2c27247c0b09522f90fbf6bbb507509427c78e240be3b361" name="maven-shared-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.4.2" rel="19.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.4-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.4.2-1" date="1692187200">- Update to upstream version 3.4.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-17" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="3bc6d59a309939d6dff5d004dbb68249c96694ea482c0f0a30e1339e762a5e31" name="maven-shared-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.4.2" rel="19.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.4-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.4.2-1" date="1692187200">- Update to upstream version 3.4.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-17" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="f13c4c017856bb21edb24d078d15a07643f1a46ad7530960f0c0a9115e1299e4" name="maven-source-plugin" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.1-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.1-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="bac6899652475a8f4f20d84f24105421d274b9fd1668f3de1b512569c94dbd81" name="maven-source-plugin" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="14.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-1" date="1692273600">- Update to upstream version 3.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-12" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="0abab4b1c0e5b8ef6c89415263b642fb981d4f59fad2f30e5fdc0c0fd6163496" name="maven-source-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="8.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.1-1" date="1579608000">- Update to upstream version 3.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.2.1-1" date="1583150400">- Update to version 3.2.1.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.1-2" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.1-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.1-6" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.1-7" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.1-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="733d14fae61758ba894c81e0b117f4367a9eacd4143c5edd21ab0d5d7f58a70f" name="maven-source-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.1-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.1-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a110856de4d2e2981de831ac433cd39f23f21d791f700ae127b30467c8806493" name="maven-source-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="14.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-10" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.1-11" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-1" date="1692273600">- Update to upstream version 3.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-12" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="6e79bec060647e1e8c2d6fb283a8c7c5dfe9b2f5ec5fbaa4cd345ee079824853" name="maven-surefire" arch="noarch">
  <version epoch="0" ver="3.0.0~M6" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.0.0~M4-1" date="1612526400">- Update to version 3.0.0-M4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-1" date="1620993600">- Update to upstream version 3.0.0~M4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-4" date="1636459200">- Port to TestNG 7.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M4-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-1" date="1650542400">- Update to upstream 3.0.0-M6 milestone snapshot</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-2" date="1651147200">- Remove workaround for maven-plugin-tools issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="fda28e462609db61682422816de275fdd0fb3b73ffe726d515448234bffeab21" name="maven-surefire" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-7" date="1693656000">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.2-1" date="1702468800">- Update to upstream version 3.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-14" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="05466ac4a74ebcdbb226bd0b54ed11190c9bc9be7786fbc9a5542810645eca6b" name="maven-surefire-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.0~M4" rel="5.el9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:2.22.0-8" date="1594382400">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.22.0-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0:2.22.0-10" date="1608033600">- Add boolean dependencies between plugin and provider subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.22.0-11" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.0.0~M4-1" date="1612526400">- Update to version 3.0.0-M4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-1" date="1620993600">- Update to upstream version 3.0.0~M4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.0~M4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c53252da8f302e32149e97c248b182ac50cf5f247d8232323cee74728f5c9c4d" name="maven-surefire-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.0~M6" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.0.0~M4-1" date="1612526400">- Update to version 3.0.0-M4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-1" date="1620993600">- Update to upstream version 3.0.0~M4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-4" date="1636459200">- Port to TestNG 7.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M4-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-1" date="1650542400">- Update to upstream 3.0.0-M6 milestone snapshot</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-2" date="1651147200">- Remove workaround for maven-plugin-tools issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="c460217d5ea42bf566d00f2ef7084b7856da10752370767dfdd5d7bb10d3c8e5" name="maven-surefire-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-7" date="1693656000">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.2-1" date="1702468800">- Update to upstream version 3.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-14" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="220becb6150a74ca9630ef4ddb5295be8b151128334db0cd7e84bdaf92fa6a27" name="maven-surefire-plugin" arch="noarch">
  <version epoch="0" ver="3.0.0~M6" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.0.0~M4-1" date="1612526400">- Update to version 3.0.0-M4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-1" date="1620993600">- Update to upstream version 3.0.0~M4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-4" date="1636459200">- Port to TestNG 7.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M4-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-1" date="1650542400">- Update to upstream 3.0.0-M6 milestone snapshot</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-2" date="1651147200">- Remove workaround for maven-plugin-tools issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="f02b500b57edbaf53b010e4a4b015c58060bd5f6c904db3268f781ecd3c637a2" name="maven-surefire-plugin" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-7" date="1693656000">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.2-1" date="1702468800">- Update to upstream version 3.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-14" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="112443be432d115f1b89894c673f695c634031d24713049d2938a8b2938bfb16" name="maven-surefire-provider-junit" arch="noarch">
  <version epoch="0" ver="3.0.0~M6" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.0.0~M4-1" date="1612526400">- Update to version 3.0.0-M4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-1" date="1620993600">- Update to upstream version 3.0.0~M4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-4" date="1636459200">- Port to TestNG 7.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M4-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-1" date="1650542400">- Update to upstream 3.0.0-M6 milestone snapshot</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-2" date="1651147200">- Remove workaround for maven-plugin-tools issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="7e138f13ea17b1ae0399b54edca9416c21d23979287fce12f12ae561636cdb23" name="maven-surefire-provider-junit" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-7" date="1693656000">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.2-1" date="1702468800">- Update to upstream version 3.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-14" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="a7d9e51fe138e23679bc55370333923ee64ac80162e9d29759985b2b99ba5388" name="maven-surefire-provider-junit5" arch="noarch">
  <version epoch="0" ver="3.0.0~M6" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.0.0~M4-1" date="1612526400">- Update to version 3.0.0-M4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-1" date="1620993600">- Update to upstream version 3.0.0~M4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-4" date="1636459200">- Port to TestNG 7.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M4-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-1" date="1650542400">- Update to upstream 3.0.0-M6 milestone snapshot</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-2" date="1651147200">- Remove workaround for maven-plugin-tools issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="bf65d4a352d56b9bfefccec8eb2e0f2a80f7b6a1297dff7055c0743ce1dc68b6" name="maven-surefire-provider-junit5" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-7" date="1693656000">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.2-1" date="1702468800">- Update to upstream version 3.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-14" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="9d23a49a52f5938a1cac33459da3492d332f8115b7271d590f3f5b7ca45070f7" name="maven-surefire-provider-testng" arch="noarch">
  <version epoch="0" ver="3.0.0~M6" rel="3.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.0.0~M4-1" date="1612526400">- Update to version 3.0.0-M4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-1" date="1620993600">- Update to upstream version 3.0.0~M4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.0.0~M4-4" date="1636459200">- Port to TestNG 7.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M4-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0~M4-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-1" date="1650542400">- Update to upstream 3.0.0-M6 milestone snapshot</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-2" date="1651147200">- Remove workaround for maven-plugin-tools issue</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="170ae905688b0d995b43e8e1d54fb4faffb2e56d1dd404bb8b694f50eb687d12" name="maven-surefire-provider-testng" arch="noarch">
  <version epoch="0" ver="3.2.2" rel="16.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0~M6-5" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0~M6-7" date="1693656000">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.2-1" date="1702468800">- Update to upstream version 3.2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.2-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.2-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.2-14" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="a7d170f471b292c429943aa07fa82df7b464e786783dd2942d78517a2aedca28" name="maven-unbound" arch="noarch">
  <version epoch="1" ver="3.9.9" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-1" date="1724414400">- Update to upstream version 3.9.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-2" date="1727265600">- Drop bindings for OpenJDK &lt; 21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-3" date="1727265601">- Update gating.yaml</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-4" date="1730289600">- Expect JVMs in %_jvmdir instead of %_jvmlibdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-6" date="1732276800">- Generate bindings with %jp_binding macro</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-8" date="1732536000">- Exclude maven-unbound from openjdk21 tests</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-9" date="1732536001">- Add test plan for maven-unbound</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-10" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-11" date="1733140800">- Require /plans/matrix/unbound/jlink for gating</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:3.9.9-12" date="1733140801">- Reuse jlink image if it already exists</changelog>
</package>
<package pkgid="3e8213b4d8558d2ffc646fbb0f4c20ad89af819e5195ff3abb7c4397457b6dac" name="maven-verifier" arch="noarch">
  <version epoch="0" ver="1.7.2" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.2-1" date="1599825600">- Update to upstream version 1.7.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.2-5" date="1625486400">- Unretire package in Fedora</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.2-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="59d8411c4b03f244536fd3e24e32e1e9af2da9b1f96d51e14ae9f55fedc0e363" name="maven-verifier" arch="noarch">
  <version epoch="0" ver="2.0.0~M1" rel="15.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.0-1" date="1692273600">- Update to upstream version 1.8.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0~M1-2" date="1692792000">- Update to upstream version 2.0.0~M1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0~M1-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0~M1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0~M1-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.0~M1-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.0~M1-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0~M1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0~M1-12" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0~M1-13" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="61358dbe2c0f6f73134db786c72476869493ad911f7fe3d08642cd83c3280dda" name="maven-verifier-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.2" rel="7.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.6-8" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.2-1" date="1599825600">- Update to upstream version 1.7.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.2-5" date="1625486400">- Unretire package in Fedora</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.2-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b5cd2c15318d377fc1ce1febf8431cc777e642d75dd582814a50269dee7922d9" name="maven-verifier-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.2" rel="9.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.2-1" date="1599825600">- Update to upstream version 1.7.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.2-5" date="1625486400">- Unretire package in Fedora</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.2-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.2-9" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="99f2b16626b29776364f6ffcc2ba250d031419576dbfda806e81ccf18ef92b81" name="maven-verifier-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.0~M1" rel="15.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8.0-1" date="1692273600">- Update to upstream version 1.8.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0~M1-2" date="1692792000">- Update to upstream version 2.0.0~M1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0~M1-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0~M1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0~M1-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.0~M1-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.0~M1-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0~M1-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0~M1-12" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0~M1-13" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="0125a2243058204876d4c661e6b05c72ca636a1100920d336360180a4dcf9e27" name="maven-wagon" arch="noarch">
  <version epoch="0" ver="3.5.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-1" date="1607083200">- Update to upstream version 3.4.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.4.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.4.2-1" date="1612267200">- Update to version 3.4.2.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-3" date="1622548800">- Obsolete removed subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-1" date="1650542400">- Update to upstream version 3.5.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a517aeb9c742bf26e21dae9a5dfc4b5a394b137a493619f49e8ac01b09f2bdef" name="maven-wagon" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.3-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.3-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.5.3-6" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.3-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.3-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-13" date="1724414400">- Set Java compiler source/target via javaVersion property</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-14" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-15" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="4cf724344c507d0ae62104ac16df6188b08935ed9549feeaefbaec7fa4214e7e" name="maven-wagon-javadoc" arch="noarch">
  <version epoch="0" ver="3.4.2" rel="10.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-7" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.4.2-8" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.4.2-9" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.4.2-10" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="2b006d939c9efdc247dca18d6acccc700fcc75d51de7293fd3b4926deed3f7ee" name="maven-wagon-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-1" date="1607083200">- Update to upstream version 3.4.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:3.4.1-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:3.4.2-1" date="1612267200">- Update to version 3.4.2.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-3" date="1622548800">- Obsolete removed subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-1" date="1650542400">- Update to upstream version 3.5.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a825a69b0f35c2e09dc26c98947001b3454329dbf9d6bc0ba6d346c93e9120af" name="maven-wagon-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.1" rel="3.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-1" date="1650542400">- Update to upstream version 3.5.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-3" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="976d65129107d46101eed5b403e15e3ea28afbec9e9de8178766b21d07b5af46" name="maven-wagon-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.3-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.3-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.5.3-6" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.3-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.3-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-13" date="1724414400">- Set Java compiler source/target via javaVersion property</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-14" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-15" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="21b3464d3d41c58732f46f56af834fd376baff5dcba3698714628bd1e25992e7" name="maven-wagon-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.3" rel="17.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.3-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.3-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.5.3-6" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.3-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.3-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-13" date="1724414400">- Set Java compiler source/target via javaVersion property</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-14" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.3-15" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="a7cc931b9e940426681efbafc52fc2d14efaca06c13330c49b555f1f633387b1" name="mc-python" arch="noarch">
  <version epoch="1" ver="4.8.26" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.8.24-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:4.8.24-4" date="1580472000">- fix gcc-10 build failure</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:4.8.25-1" date="1594987200">- update to 4.8.25</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:4.8.25-2" date="1594987201">- update BR</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.8.25-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1:4.8.26-1" date="1611230400">- update to 4.8.26</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:4.8.26-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 1:4.8.26-3" date="1612267200">- Avoid usage of libssh2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:4.8.26-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:4.8.26-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2ea09f0bb4f726d8b9763c7a4a9da8ae18225ba02c7cfbb1d04623018744fc0e" name="mdds-devel" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="4.el9"/>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.5.0-1" date="1565870400">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.7.0-1" date="1600689600">- new upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.0-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7.0-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7cba0044bea900b46ae45670503919e0530fb1cf8af20ec237e8c0b85aadb7cc" name="memcached-devel" arch="aarch64">
  <version epoch="0" ver="1.6.9" rel="7.el9"/>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0:1.6.7-1" date="1599480000">- Update to 1.6.7</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0:1.6.7-2" date="1600171200">- Rebuilt with libevent-2.1.12</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0:1.6.8-1" date="1603972800">- Update to 1.6.8</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0:1.6.9-1" date="1606219200">- Update to 1.6.9</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0:1.6.9-2" date="1611576000">- Enable sasl pwdb (#1909724)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.6.9-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0:1.6.9-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0:1.6.9-5" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0:1.6.9-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 0:1.6.9-7" date="1655294400">- Use systemd-users
- Resolves: rhbz#2095432</changelog>
</package>
<package pkgid="a466a3eac3f50f860daf8c39c3485e28f82bd713c73dccc62beadb90718ccd65" name="memcached-devel" arch="aarch64">
  <version epoch="0" ver="1.6.9" rel="7.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0:1.6.9-7.1" date="1781265600">- Fix timing side-channel in SASL password database authentication
  (CVE-2026-47783)
- Resolves: RHEL-179093</changelog>
</package>
<package pkgid="8d3f9dd944408431e6d164b195ff3cf87295989595235bb784183e9d05c635c2" name="mesa-filesystem" arch="aarch64">
  <version epoch="0" ver="25.0.7" rel="5.el9_7.alma.1"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 24.2.6-2" date="1731585600">- Do not build aarch64 drivers on x86
  Resolves: https://issues.redhat.com/browse/RHEL-66062</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 24.2.7-1" date="1732017600">- Update to 24.2.7 and LLVM 19
  Resolves: https://issues.redhat.com/browse/RHEL-66062</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 24.2.8-1" date="1732795200">- Update to 24.2.8
  Resolves: https://issues.redhat.com/browse/RHEL-53868</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 24.2.8-2" date="1739448000">- AMD Navi4x support
  Backport fixes for radeonsi and disable GFX12 on radv
  Resolves: https://issues.redhat.com/browse/RHEL-53419</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 25.0.7-1" date="1750248000">* Update to 25.0.7
  Resolves: https://issues.redhat.com/browse/RHEL-75954</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 25.0.7-2" date="1752667200">- NV dGFX fix for firefox crashing
  Backport fixes for NV dGFX driver crashing firefox
  Resolves: https://issues.redhat.com/browse/RHEL-93219</changelog>
  <changelog author="Jocelyn Falempe &lt;jfalempe@redhat.com&gt; - 25.0.7-3" date="1758196800">- Fix black screen on ppc64le
  Resolves: https://issues.redhat.com/browse/RHEL-113831</changelog>
  <changelog author="Jocelyn Falempe &lt;jfalempe@redhat.com - 25.0.7-4" date="1767700800">- Resolves: https://issues.redhat.com/browse/RHEL-138704</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 25.0.7-5" date="1771848000">- Resolves: https://issues.redhat.com/browse/RHEL-151404</changelog>
  <changelog author="Koichiro Iwao &lt;meta@almalinux.org&gt; - 25.0.7-5.alma.1" date="1773316800">- Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves:
  https://github.com/AlmaLinux/raspberry-pi/issues/32)</changelog>
</package>
<package pkgid="bedf6c7ba9e95210b13fa65f7d6db4df8708489d1d8e34d2b08721992cfd360b" name="mesa-va-drivers" arch="aarch64">
  <version epoch="0" ver="25.0.7" rel="5.el9_7.alma.1"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 24.2.6-2" date="1731585600">- Do not build aarch64 drivers on x86
  Resolves: https://issues.redhat.com/browse/RHEL-66062</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 24.2.7-1" date="1732017600">- Update to 24.2.7 and LLVM 19
  Resolves: https://issues.redhat.com/browse/RHEL-66062</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 24.2.8-1" date="1732795200">- Update to 24.2.8
  Resolves: https://issues.redhat.com/browse/RHEL-53868</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 24.2.8-2" date="1739448000">- AMD Navi4x support
  Backport fixes for radeonsi and disable GFX12 on radv
  Resolves: https://issues.redhat.com/browse/RHEL-53419</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 25.0.7-1" date="1750248000">* Update to 25.0.7
  Resolves: https://issues.redhat.com/browse/RHEL-75954</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 25.0.7-2" date="1752667200">- NV dGFX fix for firefox crashing
  Backport fixes for NV dGFX driver crashing firefox
  Resolves: https://issues.redhat.com/browse/RHEL-93219</changelog>
  <changelog author="Jocelyn Falempe &lt;jfalempe@redhat.com&gt; - 25.0.7-3" date="1758196800">- Fix black screen on ppc64le
  Resolves: https://issues.redhat.com/browse/RHEL-113831</changelog>
  <changelog author="Jocelyn Falempe &lt;jfalempe@redhat.com - 25.0.7-4" date="1767700800">- Resolves: https://issues.redhat.com/browse/RHEL-138704</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 25.0.7-5" date="1771848000">- Resolves: https://issues.redhat.com/browse/RHEL-151404</changelog>
  <changelog author="Koichiro Iwao &lt;meta@almalinux.org&gt; - 25.0.7-5.alma.1" date="1773316800">- Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves:
  https://github.com/AlmaLinux/raspberry-pi/issues/32)</changelog>
</package>
<package pkgid="8f5053aec757a470d8c070b3d71a3a429e5dbdb960ca31f271bac63e08b1b079" name="mesa-vdpau-drivers" arch="aarch64">
  <version epoch="0" ver="25.2.7" rel="4.el9.alma.1"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 25.0.7-1" date="1750248000">* Update to 25.0.7
  Resolves: https://issues.redhat.com/browse/RHEL-75954</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 25.0.7-2" date="1752667200">- NV dGFX fix for firefox crashing
  Backport fixes for NV dGFX driver crashing firefox
  Resolves: https://issues.redhat.com/browse/RHEL-93219</changelog>
  <changelog author="Jocelyn Falempe &lt;jfalempe@redhat.com&gt; - 25.0.7-3" date="1758196800">- Fix black screen on ppc64le
  Resolves: https://issues.redhat.com/browse/RHEL-113831</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttila@redhat.com - 25.2.5" date="1762344000">- Resolves: https://issues.redhat.com/browse/RHEL-107477
  Enable NVK also for RHEL 9</changelog>
  <changelog author="Mika Penttil&#xE4; Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 25.2.5-2" date="1763467200">- Disable LTO globally
  Resolves: https://issues.redhat.com/browse/RHEL-128255</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 25.2.7-1" date="1764331200">- Resolves: https://issues.redhat.com/browse/RHEL-132415</changelog>
  <changelog author="Jocelyn Falempe &lt;jfalempe@redhat.com - 25.2.7-2" date="1767700800">- Resolves: https://issues.redhat.com/browse/RHEL-105157</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 25.2.7-3" date="1769601600">- Enable va-driver only in Fedora
  Resolves: https://issues.redhat.com/browse/RHEL-144489</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 25.2.7-4" date="1771848000">- Fix s390x regressions
  Resolves: https://issues.redhat.com/browse/RHEL-151315</changelog>
  <changelog author="Koichiro Iwao &lt;meta@almalinux.org&gt; - 25.2.7-4.alma.1" date="1774958400">- Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves:
  https://github.com/AlmaLinux/raspberry-pi/issues/32)</changelog>
</package>
<package pkgid="3bbe761e8901918785a6982a6644abf8ebaca18b3282cc687079d11c130f5b7e" name="mesa-vulkan-drivers" arch="aarch64">
  <version epoch="0" ver="25.2.7" rel="4.el9.alma.1"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 25.0.7-1" date="1750248000">* Update to 25.0.7
  Resolves: https://issues.redhat.com/browse/RHEL-75954</changelog>
  <changelog author="Anusha Srivatsa &lt;asrivats@redhat.com&gt; - 25.0.7-2" date="1752667200">- NV dGFX fix for firefox crashing
  Backport fixes for NV dGFX driver crashing firefox
  Resolves: https://issues.redhat.com/browse/RHEL-93219</changelog>
  <changelog author="Jocelyn Falempe &lt;jfalempe@redhat.com&gt; - 25.0.7-3" date="1758196800">- Fix black screen on ppc64le
  Resolves: https://issues.redhat.com/browse/RHEL-113831</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttila@redhat.com - 25.2.5" date="1762344000">- Resolves: https://issues.redhat.com/browse/RHEL-107477
  Enable NVK also for RHEL 9</changelog>
  <changelog author="Mika Penttil&#xE4; Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 25.2.5-2" date="1763467200">- Disable LTO globally
  Resolves: https://issues.redhat.com/browse/RHEL-128255</changelog>
  <changelog author="Mika Penttil&#xE4; &lt;mpenttil@redhat.com&gt; - 25.2.7-1" date="1764331200">- Resolves: https://issues.redhat.com/browse/RHEL-132415</changelog>
  <changelog author="Jocelyn Falempe &lt;jfalempe@redhat.com - 25.2.7-2" date="1767700800">- Resolves: https://issues.redhat.com/browse/RHEL-105157</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 25.2.7-3" date="1769601600">- Enable va-driver only in Fedora
  Resolves: https://issues.redhat.com/browse/RHEL-144489</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 25.2.7-4" date="1771848000">- Fix s390x regressions
  Resolves: https://issues.redhat.com/browse/RHEL-151315</changelog>
  <changelog author="Koichiro Iwao &lt;meta@almalinux.org&gt; - 25.2.7-4.alma.1" date="1774958400">- Enable vc4 and v3d for Raspberry Pi graphics in AlmaLinux (Resolves:
  https://github.com/AlmaLinux/raspberry-pi/issues/32)</changelog>
</package>
<package pkgid="776016c94f3945d4817325c3729d32a5fe534241eddbb57fd1a98537db5943b5" name="microcode_ctl" arch="noarch">
  <version epoch="4" ver="20260210" rel="1.20260512.1.el9_8"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20240910-1" date="1727092800">- Update Intel CPU microcode to microcode-20240910 release, addresses
  CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
  CVE-2024-25939 (RHEL-58057):
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb6 up to 0xb8;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
    to 0xf6;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
    to 0xf6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf4 up
    to 0xf6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf4 up
    to 0xf6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xfa up to 0xfc;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf6 up
    to 0xf8;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf4 up
    to 0xf6;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf6 up
    to 0xf8;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfc up
    to 0x100;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003605 up to 0x5003707;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
    up to 0x7002904;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
    up to 0xd0003e7;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
    up to 0x10002b0;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
    up to 0xc6;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
    to 0x52;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x35 up to 0x36;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x35 up to 0x36;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x35 up to 0x36;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x35 up to 0x36;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x35 up to 0x36;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
    up to 0x36;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x35 up to 0x36;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x35 up to 0x36;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x433 up to 0x434;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
    up to 0x434;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
    to 0xfc;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
    up to 0xfc;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
    up to 0xfc;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
    up to 0xfe;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xfa up to 0xfc;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
    to 0x62;
  - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
    up to 0x1f;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
    to 0x129;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4121 up to 0x4122;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
    revision 0x4121 up to 0x4122;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
    up to 0x4122;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
    revision 0x4121 up to 0x4122;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
  - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
    to 0x36;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x35 up to 0x36;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x35 up to 0x36;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
    to 0x36;
  - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
    to 0x1a (old pf 0x11).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20241112-1" date="1732017600">- Update Intel CPU microcode to microcode-20241112 release, addresses
  CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67336):
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
    up to 0x2b000603;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
    up to 0x2b000603;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b0005c0 up to 0x2b000603;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x36 up to 0x37;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x36 up to 0x37;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x36 up to 0x37;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x36 up to 0x37;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x36 up to 0x37;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
    up to 0x37;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x36 up to 0x37;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x36 up to 0x37;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x434 up to 0x435;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
    up to 0x435;
  - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
    up to 0x20;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
    to 0x12b;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4122 up to 0x4123;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
    revision 0x4122 up to 0x4123;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
    up to 0x4123;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
    revision 0x4122 up to 0x4123;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
  - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
    to 0x37;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x36 up to 0x37;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x36 up to 0x37;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
    to 0x37;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
    up to 0x21000283;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
    intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
    intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
    up to 0x21000283.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20250211-1" date="1739880000">- Update Intel CPU microcode to microcode-20250211 release, addresses
  CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
  CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
  CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79182,
  RHEL-79186, RHEL-79187, RHEL-79242, RHEL-79243, RHEL-79246, RHEL-79251,
  RHEL-79252):
  - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
    revision 0x38;
  - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
    revision 0x38;
  - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
    revision 0x38;
  - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
    revision 0x38;
  - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
  - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
    revision 0x12c;
  - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
    revision 0x38;
  - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
    revision 0x38;
  - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
    revision 0x38;
  - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
    revision 0x38;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf8 up
    to 0xfa;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x100 up
    to 0x102;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
    up to 0xd0003f5;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
    up to 0x10002c0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000603
    up to 0x2b000620;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000390 up to
    0x2c0003e0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000603
    up to 0x2b000620;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000603 up to 0x2b000620;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000603 up to 0x2b000620;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x37 up to 0x38;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x37 up to 0x38;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x37 up to 0x38;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x37 up to 0x38;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x37 up to 0x38;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
    up to 0x38;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x37 up to 0x38;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x37 up to 0x38;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x435 up to 0x436;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
    to 0x9;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
    up to 0x436;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
    to 0x63;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
    to 0x12c;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4123 up to 0x4124;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
    revision 0x4123 up to 0x4124;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
    up to 0x4124;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
    revision 0x4123 up to 0x4124;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
  - Update of 06-ba-08/0xe0 microcode from revision 0x4123 up to 0x4124;
  - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
    to 0x38;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x37 up to 0x38;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x37 up to 0x38;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
    to 0x38;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
    up to 0x21000291;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
    intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
    intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
    up to 0x21000291.</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 4:20250512-1" date="1749556800">- Add a caveat to provide ability to persistently disable SPR-EE updates
  beyond 0x2b0005c0 on systems where absence of latency spikes
  is more important than lack of the latest CVE mitigations.
- Update Intel CPU microcode to microcode-20250512 release, addresses
  CVE-2024-28956, CVE-2025-20103, CVE-2025-20054, CVE-2024-43420,
  CVE-2025-20623, CVE-2024-45332, CVE-2025-24495, CVE-2025-20012
  (RHEL-94294, RHEL-91231, RHEL-91224, RHEL-91224, RHEL-91239)
  - Addition of 06-8f-04/0x10 microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
  - Addition of 06-8f-06/0x10 microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
  - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision
    0xa0000d1;
  - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision
    0x10003a2;
  - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
  - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
  - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
  - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
    intel-ucode/06-c5-02) at revision 0x118;
  - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at
    revision 0x118;
  - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at
    revision 0x118;
  - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in
    intel-ucode/06-c6-02) at revision 0x118;
  - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision
    0x118;
  - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at
    revision 0x118;
  - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at
    revision 0x118;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb8 up to 0xbc;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xfc up to 0x100;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x102 up
    to 0x104;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003707 up to 0x5003901;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904
    up to 0x7002b01;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5
    up to 0xd000404;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0
    up to 0x10002d0;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up
    to 0x26;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6
    up to 0xca;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up
    to 0x3c;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up
    to 0x56;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000620
    up to 0x2b000639;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c0003e0 up to
    0x2c0003f7;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000620
    up to 0x2b000639;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000620 up to 0x2b000639;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x38 up to 0x3a;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
    revision 0x38 up to 0x3a;
  - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
    revision 0x38 up to 0x3a;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38
    up to 0x3a;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
    revision 0x38 up to 0x3a;
  - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
    revision 0x38 up to 0x3a;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x436 up to 0x437;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up
    to 0xa;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436
    up to 0x437;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up
    to 0x100;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc
    up to 0x100;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc
    up to 0x100;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe
    up to 0x102;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xfc up to 0x100;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up
    to 0x64;
  - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20
    up to 0x24;
  - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330
    up to 0x3000341;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up
    to 0x12f;
  - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
    revision 0x12c up to 0x12f;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4124 up to 0x4128;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
    revision 0x4124 up to 0x4128;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124
    up to 0x4128;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
    revision 0x4124 up to 0x4128;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
  - Update of 06-ba-08/0xe0 microcode from revision 0x4124 up to 0x4128;
  - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up
    to 0x1d;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
    revision 0x38 up to 0x3a;
  - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
    revision 0x38 up to 0x3a;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
    revision 0x38 up to 0x3a;
  - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
    revision 0x38 up to 0x3a;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000291
    up to 0x210002a9;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
    intel-ucode/06-cf-01) from revision 0x21000291 up to 0x210002a9;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
    intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291
    up to 0x210002a9.</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 4:20250812-1" date="1755691200">- Update Intel CPU microcode to microcode-20250812 release
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000404
    up to 0xd000410;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002d0
    up to 0x10002e0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000639 up to 0x2b000643;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0003f7 up to 0x2c000401;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c0003f7 up to 0x2c000401;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0003f7 up to 0x2c000401;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c0003f7 up to 0x2c000401;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000639 up to 0x2b000643;
  - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x24
    up to 0x25;
  - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
    0xa0000d1 up to 0xa000100;
  - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
    0x10003a2 up to 0x10003d0;
  - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000341
    up to 0x3000362;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4128 up to 0x4129;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4128 up to 0x4129;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
    revision 0x4128 up to 0x4129;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4128 up to 0x4129;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4128
    up to 0x4129;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
    revision 0x4128 up to 0x4129;
  - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x11f up
    to 0x123;
  - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x118 up
    to 0x119;
  - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
    intel-ucode/06-c5-02) from revision 0x118 up to 0x119;
  - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
    revision 0x118 up to 0x119;
  - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
    revision 0x118 up to 0x119;
  - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
    from revision 0x118 up to 0x119;
  - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
    0x118 up to 0x119;
  - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
    revision 0x118 up to 0x119;
  - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
    revision 0x118 up to 0x119;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
    intel-ucode/06-cf-02) from revision 0x210002a9 up to 0x210002b3;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002a9
    up to 0x210002b3.</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 4:20251111-1" date="1763985600">- Fix typo in /usr/share/microcode_ctl/ucode_with_caveats/intel-06-8f-08/config
- Update Intel CPU microcode to microcode-20251111 release (RHEL-128199)
- New microcode files (in hex):
  06-ae-01: Granite Rapids-D: revision 1000273
- Microcode files (/platform_mask shown) with revision updates (in hex):
  06-8f-07/87: Sapphire Rapids: 2b000643 to 2b000650
  06-8f-08/10: Sapphire Rapids with HBM: 2c000401 to 2c000410
  06-8f-08/87: Sapphire Rapids: 2b000643 to 2b000650
  06-97-02/07: Alder Lake: 003a to 003d
  06-97-05/07: Alder Lake: 003a to 003d
  06-9a-03/80: Alder Lake-L: 0437 to 043a
  06-9a-04/80: Alder Lake-L: 0437 to 043a
  06-9a-04/40: Arizona Beach (Atom C11xx): 000a to 000b
  06-ad-01/95: Granite Rapids-X: 10003d0 to 10003f0
  06-ad-01/20: Granite Rapids-X: a000100 to a000124
  06-af-03/01: Crestmont (Sierra Forest): 3000362 to 3000382
  06-b7-01/32: Raptor Lake: 012f to 0132
  06-ba-02/e0: Raptor Lake-P: 4129 to 6133
  06-ba-03/e0: Raptor Lake-P: 4129 to 6133
  06-bd-01/80: Lunar Lake: 0123 to 0125
  06-be-00/19: Gracemont (Alder Lake-N): 001d to 001e
  06-bf-02/07: Raptor Lake-S: 003a to 003d
  06-bf-05/07: Raptor Lake-S: 003a to 003d
  06-c5-02/82: Arrow Lake-H: 0119 to 011a
  06-c6-02/82: Arrow Lake: 0119 to 011a
  06-cf-02/87: Emerald Rapids: 210002b3 to 210002c0
- Fixes errata RPL070/ADL083/LNL047/ARL054/SPR154/EMR147:
  "REP SCASB, REP CMPSB may return incorrect results when racing
  memory access with another core or thread" on Raptor Lake,
  Alder Lake, Lunar Lake, Arrow Lake, Sapphire Rapids, Emerald Rapids.</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 4:20260210-1" date="1772020800">- Update Intel CPU microcode to microcode-20260210 release (RHEL-151757)
- Microcode files (/platform_mask shown) with revision updates (in hex):
  06-6a-06/87: Ice Lake-X: d000410 to d000421
  06-6c-01/10: Ice Lake-D: 10002e0 to 10002f1
  06-7e-05/80: Ice Lake-L: 00ca to 00cc
  06-8c-01/80: Tiger Lake: 00bc to 00be
  06-8c-02/c2: Tiger Lake: 003c to 003e
  06-8d-01/c2: Tiger Lake-H: 0056 to 0058
  06-8f-07/87: Sapphire Rapids: 2b000650 to 2b000661
  06-8f-08/10: Sapphire Rapids with HBM: 2c000410 to 2c000421
  06-8f-08/87: Sapphire Rapids: 2b000650 to 2b000661
  06-97-02/07: Alder Lake: 003d to 003e
  06-97-05/07: Alder Lake: 003d to 003e
  06-9a-03/80: Alder Lake-L: 043a to 043b
  06-9a-04/80: Alder Lake-L: 043a to 043b
  06-9a-04/40: Arizona Beach (Atom C11xx): 000b to 000c
  06-9a-04/80: Alder Lake-L: 043a to 043b
  06-a7-01/02: Rocket Lake: 0064 to 0065
  06-aa-04/e6: Meteor Lake-L: 0025 to 0028
  06-ad-01/20: Granite Rapids-X: a000124 to a000133
  06-ad-01/95: Granite Rapids-X: 10003f0 to 1000405
  06-ae-01/97: Granite Rapids-D: 1000273 to 10002f3
  06-b5-00/80: Arrow Lake-U: 000a to 000d
  06-b7-01/32: Raptor Lake: 0132 to 0133
  06-ba-02/e0: Raptor Lake-P: 6133 to 6134
  06-ba-03/e0: Raptor Lake-P: 6133 to 6134
  06-be-00/19: Gracemont (Alder Lake-N): 001e to 0021
  06-bf-02/07: Raptor Lake-S: 003d to 003e
  06-bf-05/07: Raptor Lake-S: 003d to 003e
  06-c5-02/82: Arrow Lake-H: 011a to 011b
  06-c6-02/82: Arrow Lake: 011a to 011b
  06-cf-02/87: Emerald Rapids: 210002c0 to 210002d3
Resolves: RHEL-151757</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 4:20260210-1.20260512.1" date="1786449600">- Update Intel CPU microcode to microcode-20260512 release ()</changelog>
</package>
<package pkgid="1a7dc1249dddb8eac40277e0cabd87b077e58dc4c1a3734ed08f6fabaae1d489" name="microcode_ctl" arch="noarch">
  <version epoch="4" ver="20260210" rel="1.el9_8"/>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20240531-1" date="1718625600">- Update Intel CPU microcode to microcode-20240531 release, addresses
  CVE-2023-22655, CVE-2023-23583. CVE-2023-28746, CVE-2023-38575,
  CVE-2023-39368, CVE-2023-42667, CVE-2023-43490, CVE-2023-45733,
  CVE-2023-46103, CVE-2023-49141 (RHEL-30861, RHEL-30864, RHEL-30867,
  RHEL-30870, RHEL-30873, RHEL-41094, RHEL-41109):
  - Addition of 06-aa-04/0xe6 (MTL-H/U C0) microcode at revision 0x1c;
  - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) at
    revision 0x4121;
  - Addition of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) at
    revision 0x4121;
  - Addition of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-08) at revision 0x4121;
  - Addition of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-08) at revision 0x4121;
  - Addition of 06-ba-08/0xe0 microcode at revision 0x4121;
  - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode at revision
    0x21000230;
  - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode (in
    intel-ucode/06-cf-01) at revision 0x21000230;
  - Addition of 06-cf-01/0x87 (EMR-SP A0) microcode (in
    intel-ucode/06-cf-02) at revision 0x21000230;
  - Addition of 06-cf-02/0x87 (EMR-SP A1) microcode at revision
    0x21000230;
  - Removal of 06-8f-04/0x10 microcode at revision 0x2c000290;
  - Removal of 06-8f-04/0x87 (SPR-SP E0/S1) microcode at revision
    0x2b0004d0;
  - Removal of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000290;
  - Removal of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b0004d0;
  - Removal of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-04) at
    revision 0x2c000290;
  - Removal of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b0004d0;
  - Removal of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b0004d0;
  - Removal of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2c000290;
  - Removal of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-04) at revision 0x2b0004d0;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb4 up to 0xb6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xf8 up to 0xfa;
  - Update of 06-9e-09/0x2a (KBL-G/H/S/X/Xeon E3 B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-09) from revision 0xf4 up
    to 0xf8;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf4 up
    to 0xf6;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf4 up
    to 0xf6;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfa up
    to 0xfc;
  - Update of 06-55-03/0x97 (SKX-SP B1) microcode from revision 0x1000181
    up to 0x1000191;
  - Update of 06-55-06/0xbf (CLX-SP B0) microcode from revision 0x4003604
    up to 0x4003605;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003604 up to 0x5003605;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002703
    up to 0x7002802;
  - Update of 06-56-05/0x10 (BDX-NS A0/A1, HWL A1) microcode from revision
    0xe000014 up to 0xe000015;
  - Update of 06-5f-01/0x01 (DNV B0) microcode from revision 0x38 up
    to 0x3e;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003b9
    up to 0xd0003d1;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000268
    up to 0x1000290;
  - Update of 06-7a-01/0x01 (GLK B0) microcode from revision 0x3e up
    to 0x42;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x22 up
    to 0x24;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc2
    up to 0xc4;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x34 up
    to 0x36;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x4e up
    to 0x50;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000290 up to 0x2c000390;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000290 up to 0x2c000390;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0004d0
    up to 0x2b0005c0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000290 up to 0x2c000390;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000290 up to 0x2c000390;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000290 up to 0x2c000390;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000290 up to
    0x2c000390;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0004d0
    up to 0x2b0005c0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000290 up to 0x2c000390;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000290 up to 0x2c000390;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000290 up to 0x2c000390;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000290 up to 0x2c000390;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000290 up to 0x2c000390;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b0004d0 up to 0x2b0005c0;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x17 up
    to 0x19;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x32 up to 0x35;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x32 up to 0x35;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x32 up to 0x35;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x32 up to 0x35;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x32 up to 0x35;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x32
    up to 0x35;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x32 up to 0x35;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x32 up to 0x35;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x430 up to 0x433;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x430 up to 0x433;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x430 up to 0x433;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x430
    up to 0x433;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x5 up
    to 0x7;
  - Update of 06-9c-00/0x01 (JSL A0/A1) microcode from revision 0x24000024
    up to 0x24000026;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xf8 up
    to 0xfa;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xf8
    up to 0xfa;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xf8
    up to 0xfa;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xf8
    up to 0xfa;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xf8 up to 0xfa;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5d up
    to 0x5e;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x11d up
    to 0x123;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x411c up to 0x4121;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x411c up to 0x4121;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x411c up to 0x4121;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x411c
    up to 0x4121;
  - Update of 06-be-00/0x11 (ADL-N A0) microcode from revision 0x12 up
    to 0x17;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x32 up to 0x35;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x32 up
    to 0x35;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x32 up to 0x35;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x32 up to 0x35;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x32 up to 0x35;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x32 up
    to 0x35.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20240910-1" date="1727092800">- Update Intel CPU microcode to microcode-20240910 release, addresses
  CVE-2024-23984, CVE-2024-24853, CVE-2024-24968, CVE-2024-24980,
  CVE-2024-25939 (RHEL-58057):
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb6 up to 0xb8;
  - Update of 06-8e-09/0x10 (AML-Y 2+2 H0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
    to 0xf6;
  - Update of 06-8e-09/0xc0 (KBL-U/U 2+3e/Y H0/J1) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-09) from revision 0xf4 up
    to 0xf6;
  - Update of 06-8e-0a/0xc0 (CFL-U 4+3e D0, KBL-R Y0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0a) from revision 0xf4 up
    to 0xf6;
  - Update of 06-8e-0b/0xd0 (WHL-U W0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0b) from revision 0xf4 up
    to 0xf6;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xfa up to 0xfc;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf6 up
    to 0xf8;
  - Update of 06-9e-0b/0x02 (CFL-E/H/S B0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0b) from revision 0xf4 up
    to 0xf6;
  - Update of 06-9e-0c/0x22 (CFL-H/S/Xeon E P0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0c) from revision 0xf6 up
    to 0xf8;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0xfc up
    to 0x100;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003605 up to 0x5003707;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002802
    up to 0x7002904;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003d1
    up to 0xd0003e7;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x1000290
    up to 0x10002b0;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc4
    up to 0xc6;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x36 up
    to 0x38;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x50 up
    to 0x52;
  - Update of 06-96-01/0x01 (EHL B1) microcode from revision 0x19 up
    to 0x1a;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x35 up to 0x36;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x35 up to 0x36;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x35 up to 0x36;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x35 up to 0x36;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x35 up to 0x36;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x35
    up to 0x36;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x35 up to 0x36;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x35 up to 0x36;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x433 up to 0x434;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x433 up to 0x434;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x433 up to 0x434;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x433
    up to 0x434;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfa up
    to 0xfc;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfa
    up to 0xfc;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfa
    up to 0xfc;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfa
    up to 0xfe;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xfa up to 0xfc;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x5e up
    to 0x62;
  - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1c
    up to 0x1f;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x123 up
    to 0x129;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4121 up to 0x4122;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4121 up to 0x4122;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
    revision 0x4121 up to 0x4122;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4121 up to 0x4122;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4121
    up to 0x4122;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
    revision 0x4121 up to 0x4122;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4121 up to 0x4122;
  - Update of 06-ba-08/0xe0 microcode from revision 0x4121 up to 0x4122;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x35 up to 0x36;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x35 up
    to 0x36;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x35 up to 0x36;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x35 up to 0x36;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x35 up to 0x36;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x35 up
    to 0x36;
  - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x17 up
    to 0x1a (old pf 0x11).</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20241112-1" date="1732017600">- Update Intel CPU microcode to microcode-20241112 release, addresses
  CVE-2024-21820, CVE-2024-21853, CVE-2024-23918, CVE-2024-23984 (RHEL-67336):
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b0005c0
    up to 0x2b000603;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b0005c0
    up to 0x2b000603;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b0005c0 up to 0x2b000603;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b0005c0 up to 0x2b000603;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x36 up to 0x37;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x36 up to 0x37;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x36 up to 0x37;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x36 up to 0x37;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x36 up to 0x37;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x36
    up to 0x37;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x36 up to 0x37;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x36 up to 0x37;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x434 up to 0x435;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x434 up to 0x435;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x434 up to 0x435;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x434
    up to 0x435;
  - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x1f
    up to 0x20;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x129 up
    to 0x12b;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4122 up to 0x4123;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4122 up to 0x4123;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
    revision 0x4122 up to 0x4123;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4122 up to 0x4123;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4122
    up to 0x4123;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
    revision 0x4122 up to 0x4123;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4122 up to 0x4123;
  - Update of 06-ba-08/0xe0 microcode from revision 0x4122 up to 0x4123;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x36 up to 0x37;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x36 up
    to 0x37;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x36 up to 0x37;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x36 up to 0x37;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x36 up to 0x37;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x36 up
    to 0x37;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000230
    up to 0x21000283;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
    intel-ucode/06-cf-01) from revision 0x21000230 up to 0x21000283;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
    intel-ucode/06-cf-02) from revision 0x21000230 up to 0x21000283;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000230
    up to 0x21000283.</changelog>
  <changelog author="Eugene Syromiatnikov &lt;esyr@redhat.com&gt; - 4:20250211-1" date="1739880000">- Update Intel CPU microcode to microcode-20250211 release, addresses
  CVE-2023-34440, CVE-2023-43758, CVE-2024-24582, CVE-2024-28047,
  CVE-2024-28127, CVE-2024-29214, CVE-2024-31068, CVE-2024-31157,
  CVE-2024-37020, CVE-2024-39279, CVE-2024-39355, CVE-2024-36293 (RHEL-79182,
  RHEL-79186, RHEL-79187, RHEL-79242, RHEL-79243, RHEL-79246, RHEL-79251,
  RHEL-79252):
  - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) at
    revision 0x38;
  - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) at
    revision 0x38;
  - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) at
    revision 0x38;
  - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) at
    revision 0x38;
  - Addition of 06-af-03/0x01 (SRF-SP C0) microcode at revision 0x3000330;
  - Addition of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) at
    revision 0x12c;
  - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) at
    revision 0x38;
  - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) at
    revision 0x38;
  - Addition of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) at
    revision 0x38;
  - Addition of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) at
    revision 0x38;
  - Update of 06-9e-0a/0x22 (CFL-H/S/Xeon E U0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0a) from revision 0xf8 up
    to 0xfa;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x100 up
    to 0x102;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003e7
    up to 0xd0003f5;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002b0
    up to 0x10002c0;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000603
    up to 0x2b000620;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c000390 up to
    0x2c0003e0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000603
    up to 0x2b000620;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000603 up to 0x2b000620;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000603 up to 0x2b000620;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c000390 up to 0x2c0003e0;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000603 up to 0x2b000620;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x37 up to 0x38;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x37 up to 0x38;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x37 up to 0x38;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x37 up to 0x38;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x37 up to 0x38;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x37
    up to 0x38;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x37 up to 0x38;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x37 up to 0x38;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x435 up to 0x436;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x435 up to 0x436;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x435 up to 0x436;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x7 up
    to 0x9;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x435
    up to 0x436;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x62 up
    to 0x63;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12b up
    to 0x12c;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4123 up to 0x4124;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4123 up to 0x4124;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
    revision 0x4123 up to 0x4124;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4123 up to 0x4124;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4123
    up to 0x4124;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
    revision 0x4123 up to 0x4124;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4123 up to 0x4124;
  - Update of 06-ba-08/0xe0 microcode from revision 0x4123 up to 0x4124;
  - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1a up
    to 0x1c;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x37 up to 0x38;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x37 up
    to 0x38;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x37 up to 0x38;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x37 up to 0x38;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x37 up to 0x38;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x37 up
    to 0x38;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000283
    up to 0x21000291;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
    intel-ucode/06-cf-01) from revision 0x21000283 up to 0x21000291;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
    intel-ucode/06-cf-02) from revision 0x21000283 up to 0x21000291;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000283
    up to 0x21000291.</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 4:20250512-1" date="1749556800">- Add a caveat to provide ability to persistently disable SPR-EE updates
  beyond 0x2b0005c0 on systems where absence of latency spikes
  is more important than lack of the latest CVE mitigations.
- Update Intel CPU microcode to microcode-20250512 release, addresses
  CVE-2024-28956, CVE-2025-20103, CVE-2025-20054, CVE-2024-43420,
  CVE-2025-20623, CVE-2024-45332, CVE-2025-24495, CVE-2025-20012
  (RHEL-94294, RHEL-91231, RHEL-91224, RHEL-91224, RHEL-91239)
  - Addition of 06-8f-04/0x10 microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
  - Addition of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
  - Addition of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
  - Addition of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
  - Addition of 06-8f-06/0x10 microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
  - Addition of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
  - Addition of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
  - Addition of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2c0003f7;
  - Addition of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-06-8f-08/intel-ucode/06-8f-08) at revision 0x2b000639;
  - Addition of 06-ad-01/0x20 (GNR-AP/SP H0) microcode at revision
    0xa0000d1;
  - Addition of 06-ad-01/0x95 (GNR-AP/SP B0) microcode at revision
    0x10003a2;
  - Addition of 06-b5-00/0x80 (ARL-U A1) microcode at revision 0xa;
  - Addition of 06-bd-01/0x80 (LNL B0) microcode at revision 0x11f;
  - Addition of 06-c5-02/0x82 (ARL-H A1) microcode at revision 0x118;
  - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
    intel-ucode/06-c5-02) at revision 0x118;
  - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) at
    revision 0x118;
  - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) at
    revision 0x118;
  - Addition of 06-c5-02/0x82 (ARL-H A1) microcode (in
    intel-ucode/06-c6-02) at revision 0x118;
  - Addition of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode at revision
    0x118;
  - Addition of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) at
    revision 0x118;
  - Addition of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) at
    revision 0x118;
  - Update of 06-8c-01/0x80 (TGL-UP3/UP4 B1) microcode (in
    intel-06-8c-01/intel-ucode/06-8c-01) from revision 0xb8 up to 0xbc;
  - Update of 06-8e-0c/0x94 (AML-Y 4+2 V0, CML-U 4+2 V0, WHL-U V0)
    microcode (in intel-06-8e-9e-0x-dell/intel-ucode/06-8e-0c) from
    revision 0xfc up to 0x100;
  - Update of 06-9e-0d/0x22 (CFL-H/S/Xeon E R0) microcode (in
    intel-06-8e-9e-0x-dell/intel-ucode/06-9e-0d) from revision 0x102 up
    to 0x104;
  - Update of 06-55-07/0xbf (CLX-SP/W/X B1/L1) microcode from revision
    0x5003707 up to 0x5003901;
  - Update of 06-55-0b/0xbf (CPX-SP A1) microcode from revision 0x7002904
    up to 0x7002b01;
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd0003f5
    up to 0xd000404;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002c0
    up to 0x10002d0;
  - Update of 06-7a-08/0x01 (GLK-R R0) microcode from revision 0x24 up
    to 0x26;
  - Update of 06-7e-05/0x80 (ICL-U/Y D1) microcode from revision 0xc6
    up to 0xca;
  - Update of 06-8c-02/0xc2 (TGL-R C0) microcode from revision 0x38 up
    to 0x3c;
  - Update of 06-8d-01/0xc2 (TGL-H R0) microcode from revision 0x52 up
    to 0x56;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode from revision
    0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode from revision 0x2b000620
    up to 0x2b000639;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-05) from
    revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-05) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-06) from
    revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-06/0x10 microcode from revision 0x2c0003e0 up to
    0x2c0003f7;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode from revision 0x2b000620
    up to 0x2b000639;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2c0003e0 up to 0x2c0003f7;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-06) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000620 up to 0x2b000639;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000620 up to 0x2b000639;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode from revision
    0x38 up to 0x3a;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-97-02) from revision 0x38 up to 0x3a;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-02)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-02) from
    revision 0x38 up to 0x3a;
  - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-02) from
    revision 0x38 up to 0x3a;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-97-05) from revision 0x38 up to 0x3a;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode from revision 0x38
    up to 0x3a;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-97-05)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-97-05) from
    revision 0x38 up to 0x3a;
  - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-97-05) from
    revision 0x38 up to 0x3a;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode from revision
    0x436 up to 0x437;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode (in
    intel-ucode/06-9a-03) from revision 0x436 up to 0x437;
  - Update of 06-9a-03/0x80 (ADL-P 6+8/U 9W L0/R0) microcode (in
    intel-ucode/06-9a-04) from revision 0x436 up to 0x437;
  - Update of 06-9a-04/0x40 (AZB A0) microcode from revision 0x9 up
    to 0xa;
  - Update of 06-9a-04/0x80 (ADL-P 2+8 R0) microcode from revision 0x436
    up to 0x437;
  - Update of 06-a5-02/0x20 (CML-H R1) microcode from revision 0xfc up
    to 0x100;
  - Update of 06-a5-03/0x22 (CML-S 6+2 G1) microcode from revision 0xfc
    up to 0x100;
  - Update of 06-a5-05/0x22 (CML-S 10+2 Q0) microcode from revision 0xfc
    up to 0x100;
  - Update of 06-a6-00/0x80 (CML-U 6+2 A0) microcode from revision 0xfe
    up to 0x102;
  - Update of 06-a6-01/0x80 (CML-U 6+2 v2 K1) microcode from revision
    0xfc up to 0x100;
  - Update of 06-a7-01/0x02 (RKL-S B0) microcode from revision 0x63 up
    to 0x64;
  - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x20
    up to 0x24;
  - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000330
    up to 0x3000341;
  - Update of 06-b7-01/0x32 (RPL-S B0) microcode from revision 0x12c up
    to 0x12f;
  - Update of 06-b7-04/0x32 microcode (in intel-ucode/06-b7-01) from
    revision 0x12c up to 0x12f;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4124 up to 0x4128;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4124 up to 0x4128;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
    revision 0x4124 up to 0x4128;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4124 up to 0x4128;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4124
    up to 0x4128;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
    revision 0x4124 up to 0x4128;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-08) from revision 0x4124 up to 0x4128;
  - Update of 06-ba-08/0xe0 microcode from revision 0x4124 up to 0x4128;
  - Update of 06-be-00/0x19 (ADL-N A0) microcode from revision 0x1c up
    to 0x1d;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-02) from revision 0x38 up to 0x3a;
  - Update of 06-bf-02/0x07 (ADL C0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-bf-05/0x07 (ADL C0) microcode (in intel-ucode/06-bf-02)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-02) from
    revision 0x38 up to 0x3a;
  - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-02) from
    revision 0x38 up to 0x3a;
  - Update of 06-97-02/0x07 (ADL-HX/S 8+8 C0) microcode (in
    intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
  - Update of 06-97-05/0x07 (ADL-S 6+0 K0) microcode (in
    intel-ucode/06-bf-05) from revision 0x38 up to 0x3a;
  - Update of 06-bf-02/0x07 (ADL C0) microcode (in intel-ucode/06-bf-05)
    from revision 0x38 up to 0x3a;
  - Update of 06-bf-05/0x07 (ADL C0) microcode from revision 0x38 up
    to 0x3a;
  - Update of 06-bf-06/0x07 microcode (in intel-ucode/06-bf-05) from
    revision 0x38 up to 0x3a;
  - Update of 06-bf-07/0x07 microcode (in intel-ucode/06-bf-05) from
    revision 0x38 up to 0x3a;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode from revision 0x21000291
    up to 0x210002a9;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode (in
    intel-ucode/06-cf-01) from revision 0x21000291 up to 0x210002a9;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
    intel-ucode/06-cf-02) from revision 0x21000291 up to 0x210002a9;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x21000291
    up to 0x210002a9.</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 4:20250812-1" date="1755691200">- Update Intel CPU microcode to microcode-20250812 release
  - Update of 06-6a-06/0x87 (ICX-SP D0) microcode from revision 0xd000404
    up to 0xd000410;
  - Update of 06-6c-01/0x10 (ICL-D B0) microcode from revision 0x10002d0
    up to 0x10002e0;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode from revision
    0x2b000639 up to 0x2b000643;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode (in
    intel-ucode/06-8f-07) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-04/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0003f7 up to 0x2c000401;
  - Update of 06-8f-04/0x87 (SPR-SP E0/S1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-05/0x10 (SPR-HBM B1) microcode (in
    intel-ucode/06-8f-08) from revision 0x2c0003f7 up to 0x2c000401;
  - Update of 06-8f-05/0x87 (SPR-SP E2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-06/0x10 microcode (in intel-ucode/06-8f-08) from
    revision 0x2c0003f7 up to 0x2c000401;
  - Update of 06-8f-06/0x87 (SPR-SP E3) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-07/0x87 (SPR-SP E4/S2) microcode (in
    intel-ucode/06-8f-08) from revision 0x2b000639 up to 0x2b000643;
  - Update of 06-8f-08/0x10 (SPR-HBM B3) microcode from revision
    0x2c0003f7 up to 0x2c000401;
  - Update of 06-8f-08/0x87 (SPR-SP E5/S3) microcode from revision
    0x2b000639 up to 0x2b000643;
  - Update of 06-aa-04/0xe6 (MTL-H/U C0) microcode from revision 0x24
    up to 0x25;
  - Update of 06-ad-01/0x20 (GNR-AP/SP H0) microcode from revision
    0xa0000d1 up to 0xa000100;
  - Update of 06-ad-01/0x95 (GNR-AP/SP B0) microcode from revision
    0x10003a2 up to 0x10003d0;
  - Update of 06-af-03/0x01 (SRF-SP C0) microcode from revision 0x3000341
    up to 0x3000362;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode from revision
    0x4128 up to 0x4129;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode (in
    intel-ucode/06-ba-02) from revision 0x4128 up to 0x4129;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-02) from
    revision 0x4128 up to 0x4129;
  - Update of 06-ba-02/0xe0 (RPL-H 6+8/P 6+8 J0) microcode (in
    intel-ucode/06-ba-03) from revision 0x4128 up to 0x4129;
  - Update of 06-ba-03/0xe0 (RPL-U 2+8 Q0) microcode from revision 0x4128
    up to 0x4129;
  - Update of 06-ba-08/0xe0 microcode (in intel-ucode/06-ba-03) from
    revision 0x4128 up to 0x4129;
  - Update of 06-bd-01/0x80 (LNL B0) microcode from revision 0x11f up
    to 0x123;
  - Update of 06-c5-02/0x82 (ARL-H A1) microcode from revision 0x118 up
    to 0x119;
  - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode (in
    intel-ucode/06-c5-02) from revision 0x118 up to 0x119;
  - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c5-02) from
    revision 0x118 up to 0x119;
  - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c5-02) from
    revision 0x118 up to 0x119;
  - Update of 06-c5-02/0x82 (ARL-H A1) microcode (in intel-ucode/06-c6-02)
    from revision 0x118 up to 0x119;
  - Update of 06-c6-02/0x82 (ARL-HX 8P/S B0) microcode from revision
    0x118 up to 0x119;
  - Update of 06-c6-04/0x82 microcode (in intel-ucode/06-c6-02) from
    revision 0x118 up to 0x119;
  - Update of 06-ca-02/0x82 microcode (in intel-ucode/06-c6-02) from
    revision 0x118 up to 0x119;
  - Update of 06-cf-01/0x87 (EMR-SP A0) microcode (in
    intel-ucode/06-cf-02) from revision 0x210002a9 up to 0x210002b3;
  - Update of 06-cf-02/0x87 (EMR-SP A1) microcode from revision 0x210002a9
    up to 0x210002b3.</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 4:20251111-1" date="1763985600">- Fix typo in /usr/share/microcode_ctl/ucode_with_caveats/intel-06-8f-08/config
- Update Intel CPU microcode to microcode-20251111 release (RHEL-128199)
- New microcode files (in hex):
  06-ae-01: Granite Rapids-D: revision 1000273
- Microcode files (/platform_mask shown) with revision updates (in hex):
  06-8f-07/87: Sapphire Rapids: 2b000643 to 2b000650
  06-8f-08/10: Sapphire Rapids with HBM: 2c000401 to 2c000410
  06-8f-08/87: Sapphire Rapids: 2b000643 to 2b000650
  06-97-02/07: Alder Lake: 003a to 003d
  06-97-05/07: Alder Lake: 003a to 003d
  06-9a-03/80: Alder Lake-L: 0437 to 043a
  06-9a-04/80: Alder Lake-L: 0437 to 043a
  06-9a-04/40: Arizona Beach (Atom C11xx): 000a to 000b
  06-ad-01/95: Granite Rapids-X: 10003d0 to 10003f0
  06-ad-01/20: Granite Rapids-X: a000100 to a000124
  06-af-03/01: Crestmont (Sierra Forest): 3000362 to 3000382
  06-b7-01/32: Raptor Lake: 012f to 0132
  06-ba-02/e0: Raptor Lake-P: 4129 to 6133
  06-ba-03/e0: Raptor Lake-P: 4129 to 6133
  06-bd-01/80: Lunar Lake: 0123 to 0125
  06-be-00/19: Gracemont (Alder Lake-N): 001d to 001e
  06-bf-02/07: Raptor Lake-S: 003a to 003d
  06-bf-05/07: Raptor Lake-S: 003a to 003d
  06-c5-02/82: Arrow Lake-H: 0119 to 011a
  06-c6-02/82: Arrow Lake: 0119 to 011a
  06-cf-02/87: Emerald Rapids: 210002b3 to 210002c0
- Fixes errata RPL070/ADL083/LNL047/ARL054/SPR154/EMR147:
  "REP SCASB, REP CMPSB may return incorrect results when racing
  memory access with another core or thread" on Raptor Lake,
  Alder Lake, Lunar Lake, Arrow Lake, Sapphire Rapids, Emerald Rapids.</changelog>
  <changelog author="Denys Vlasenko &lt;dvlasenk@redhat.com&gt; - 4:20260210-1" date="1772020800">- Update Intel CPU microcode to microcode-20260210 release (RHEL-151757)
- Microcode files (/platform_mask shown) with revision updates (in hex):
  06-6a-06/87: Ice Lake-X: d000410 to d000421
  06-6c-01/10: Ice Lake-D: 10002e0 to 10002f1
  06-7e-05/80: Ice Lake-L: 00ca to 00cc
  06-8c-01/80: Tiger Lake: 00bc to 00be
  06-8c-02/c2: Tiger Lake: 003c to 003e
  06-8d-01/c2: Tiger Lake-H: 0056 to 0058
  06-8f-07/87: Sapphire Rapids: 2b000650 to 2b000661
  06-8f-08/10: Sapphire Rapids with HBM: 2c000410 to 2c000421
  06-8f-08/87: Sapphire Rapids: 2b000650 to 2b000661
  06-97-02/07: Alder Lake: 003d to 003e
  06-97-05/07: Alder Lake: 003d to 003e
  06-9a-03/80: Alder Lake-L: 043a to 043b
  06-9a-04/80: Alder Lake-L: 043a to 043b
  06-9a-04/40: Arizona Beach (Atom C11xx): 000b to 000c
  06-9a-04/80: Alder Lake-L: 043a to 043b
  06-a7-01/02: Rocket Lake: 0064 to 0065
  06-aa-04/e6: Meteor Lake-L: 0025 to 0028
  06-ad-01/20: Granite Rapids-X: a000124 to a000133
  06-ad-01/95: Granite Rapids-X: 10003f0 to 1000405
  06-ae-01/97: Granite Rapids-D: 1000273 to 10002f3
  06-b5-00/80: Arrow Lake-U: 000a to 000d
  06-b7-01/32: Raptor Lake: 0132 to 0133
  06-ba-02/e0: Raptor Lake-P: 6133 to 6134
  06-ba-03/e0: Raptor Lake-P: 6133 to 6134
  06-be-00/19: Gracemont (Alder Lake-N): 001e to 0021
  06-bf-02/07: Raptor Lake-S: 003d to 003e
  06-bf-05/07: Raptor Lake-S: 003d to 003e
  06-c5-02/82: Arrow Lake-H: 011a to 011b
  06-c6-02/82: Arrow Lake: 011a to 011b
  06-cf-02/87: Emerald Rapids: 210002c0 to 210002d3
Resolves: RHEL-151757</changelog>
</package>
<package pkgid="fe905c81ea01d8eeb21fc6551e5209f93e47db2929d5ee800e7ae421b3e68371" name="mingw-w64-tools" arch="aarch64">
  <version epoch="0" ver="12.0.0" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.0.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.0.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Nianqing Yao &lt;imbearchild@outlook.com&gt; - 10.0.0-4" date="1675598400">- Fix build on riscv64.</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 11.0.0-1" date="1682856000">- Update to 11.0.0</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 11.0.0-2" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1045</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 11.0.1-1" date="1692273600">- Update to 11.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.0.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.0.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 12.0.0-1" date="1721131200">- Update to 12.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0.0-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="ebda43fbf9ab818518582dd5bb9b8c36d57c116efc44acc778af53d97571180d" name="mingw32-gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="17deccb527dec066f94bbf9f5b21d376649c592380eb219d1f40f6826388ae38" name="mingw32-gcc-objc++" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="6107d5790ced93df7cad133a611a3ed53fdefe62b706cc6933f90c0cd35a63ed" name="mingw32-gcc-objc" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="578a3048e9774f2de778b0d36efc121e843d5808f61dbf13940bbce9603e89aa" name="mingw32-gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="8be95294a8c5b9b9bdcce963edc08c58882242f8a0fb25d3960d1e90ec8f98c0" name="mingw32-glib2" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="3.el9"/>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-1" date="1716292800">- Bump glib2 version 2.78.6
- Fix CVEs: CVE-2024-34397
- Resolves: RHEL-35776</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-2" date="1732622400">- Resolves: RHEL-67088 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-3" date="1765195200">- Resolves: RHEL-131012 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()</changelog>
</package>
<package pkgid="427345ab6bb853ed43bbeaeee61e3fe8ac7f3b3e5043ed079af88d2c7d6951ca" name="mingw32-glib2-static" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="3.el9"/>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-1" date="1716292800">- Bump glib2 version 2.78.6
- Fix CVEs: CVE-2024-34397
- Resolves: RHEL-35776</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-2" date="1732622400">- Resolves: RHEL-67088 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-3" date="1765195200">- Resolves: RHEL-131012 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()</changelog>
</package>
<package pkgid="3ee5a84e045dbd21d2d050e12cbd6a411e17c0948884ca0906c87a8f2af11e5a" name="mingw32-libffi" arch="noarch">
  <version epoch="0" ver="3.4.6" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.4.4-1" date="1668254400">- Update to 3.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 3.4.4-3" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1055</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.4.6-1" date="1711108800">- Update to 3.4.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.6-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="cab4c29ea420fd77e185f492e028913291ffb3469564ea29a3c6b0114de59d04" name="mingw32-libffi-static" arch="noarch">
  <version epoch="0" ver="3.4.6" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.4.4-1" date="1668254400">- Update to 3.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 3.4.4-3" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1055</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.4.6-1" date="1711108800">- Update to 3.4.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.6-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="8416494b6cea5ed36d2cba5190a30d997e357c91161d6bb4b5ce93034bb9b036" name="mingw32-libgomp" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="33aa196ec92c7a2eeecddc1394f8f6adc8ff9907b9b7ac6971de8a55821e48e9" name="mingw32-libstdc++" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="8c485e4c6b49bcd18ae3161456efd069a38bf341e01adef553eee0ab30ebd0bb" name="mingw32-pcre" arch="noarch">
  <version epoch="0" ver="8.43" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.43-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 8.43-8" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1058</changelog>
</package>
<package pkgid="ee98362700f9acc4fec98b9ca64fa7c0619aa768bb01fbfacfe37dfc8f1a78da" name="mingw32-pcre-static" arch="noarch">
  <version epoch="0" ver="8.43" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.43-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 8.43-8" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1058</changelog>
</package>
<package pkgid="fc3d8c9c41a845f0efce831e1affbfeacf9e307c09e5e28ad1232e4ff9250d0f" name="mingw32-pcre2" arch="noarch">
  <version epoch="0" ver="10.42" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.37-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.39-1" date="1636113600">- Update to 10.39</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.39-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.39-3" date="1648209600">- Rebuild with mingw-gcc-12</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.40-1" date="1651406400">- Update to 10.40</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.40-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.42-1" date="1673611200">- Update to 10.42</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.42-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.42-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="48ff55687b0312cc44491c10f95c175b62fecf9cab29329152200b7386af346f" name="mingw32-pcre2-static" arch="noarch">
  <version epoch="0" ver="10.42" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.37-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.39-1" date="1636113600">- Update to 10.39</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.39-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.39-3" date="1648209600">- Rebuild with mingw-gcc-12</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.40-1" date="1651406400">- Update to 10.40</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.40-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.42-1" date="1673611200">- Update to 10.42</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.42-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.42-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="07603021a28859b36aeb48c4aa15c5b96743dca186a9a556f8c044dac95fcd40" name="mingw32-pixman" arch="noarch">
  <version epoch="0" ver="0.42.2" rel="3.el9"/>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 0.42.2-3" date="1699531200">- Bump pixman version 0.42.2
- Drop DesktopQE gating 
- Fix CVEs: CVE-2022-44638
- Resolves: RHEL-5013</changelog>
</package>
<package pkgid="5337bc2c141a80ddae900d53084ee43838162e59fbf093a68b137e22054c3b4d" name="mingw32-pixman-static" arch="noarch">
  <version epoch="0" ver="0.42.2" rel="3.el9"/>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 0.42.2-3" date="1699531200">- Bump pixman version 0.42.2
- Drop DesktopQE gating 
- Fix CVEs: CVE-2022-44638
- Resolves: RHEL-5013</changelog>
</package>
<package pkgid="a19f52d79bd417f78f654c0f563f176ce2feca0137b2ca07cb789c8a5463d24d" name="mingw32-srvany" arch="noarch">
  <version epoch="0" ver="1.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-25.20150115gitfd659e77" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-26.20150115gitfd659e77" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.0-27" date="1611748800">- Update to 20210127.
- Add pnp_wait.exe binary.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-28.20210127git89f2162c" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.1-1" date="1634644800">- Move to real version numbers upstream.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-3" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a57d01837b39b2e6eb17b7aecbef81572fd7af197b75ccaa06910bbedf552f5b" name="mingw32-termcap" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="31.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.1-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 1.3.1-31" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1059</changelog>
</package>
<package pkgid="1d81b21f9c475042e59bf7ed3414ebbe5f7218fda859b6d2ecc4b54f54d461cd" name="mingw32-termcap-static" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="31.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.1-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 1.3.1-31" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1059</changelog>
</package>
<package pkgid="38c3691ce6d6e05826ea8a1a0a3c7474f2105bb336d5ca458bfcd641de2047ed" name="mingw32-zlib" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.12-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.2.13-1" date="1670932800">- Update to 1.2.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.3.1-1" date="1706702400">- Update to 1.3.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@nil.im&gt; - 1.3.1-2" date="1711713600">- Build UCRT64 package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="f43170196a8fec7be36308bdcb243cb2bb83820163062c786c48f8c394db53a2" name="mingw32-zlib-static" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.12-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.2.13-1" date="1670932800">- Update to 1.2.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.3.1-1" date="1706702400">- Update to 1.3.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@nil.im&gt; - 1.3.1-2" date="1711713600">- Build UCRT64 package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="a0f3b81e3e8aac987775b55c52f1f7f78f117d8e07e1b3a50e68cc59fae483ba" name="mingw64-gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="da182ee291eb34bdca89edaf5a8a589a99f2a50613650ac33b1af7f2a1064681" name="mingw64-gcc-objc++" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="3aa2360d63aba7d01725d836182e950956dc3662d40debb4a32fd97fcca1e6b4" name="mingw64-gcc-objc" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="4657ef5d17a4f1ae4a006694610e497f85e38e71764c9fec062b1c7fc9f83d7f" name="mingw64-gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="a6b316346aa4440804f86f107147dcdd1a26e9a03c2525509d47114de9ada502" name="mingw64-glib2" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="3.el9"/>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-1" date="1716292800">- Bump glib2 version 2.78.6
- Fix CVEs: CVE-2024-34397
- Resolves: RHEL-35776</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-2" date="1732622400">- Resolves: RHEL-67088 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-3" date="1765195200">- Resolves: RHEL-131012 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()</changelog>
</package>
<package pkgid="9b06851a94f4f4658c2bc2d356be455a7ddd0fb44da48a832592b39c84ae4fba" name="mingw64-glib2-static" arch="noarch">
  <version epoch="0" ver="2.78.6" rel="3.el9"/>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-1" date="1716292800">- Bump glib2 version 2.78.6
- Fix CVEs: CVE-2024-34397
- Resolves: RHEL-35776</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-2" date="1732622400">- Resolves: RHEL-67088 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 2.78.6-3" date="1765195200">- Resolves: RHEL-131012 - CVE-2025-13601 mingw-glib2: Integer overflow in in g_escape_uri_string()</changelog>
</package>
<package pkgid="48d91a69d9437484f29a94dd245ab4c94ff497a0378d3919165e5a52c6e9d844" name="mingw64-libffi" arch="noarch">
  <version epoch="0" ver="3.4.6" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.4.4-1" date="1668254400">- Update to 3.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 3.4.4-3" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1055</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.4.6-1" date="1711108800">- Update to 3.4.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.6-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="b1547a2717d4e195b417d521050a9adb035866b8023035fd25bef715872569b4" name="mingw64-libffi-static" arch="noarch">
  <version epoch="0" ver="3.4.6" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.4.4-1" date="1668254400">- Update to 3.4.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 3.4.4-3" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1055</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.4-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 3.4.6-1" date="1711108800">- Update to 3.4.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.6-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="933caf7fe6170180c400083d0afb8d298e2c34ea73c203ce364897d9016f930d" name="mingw64-libgomp" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="d5991b5f1ca2a31c342460538048222f4081c1180f316267b78bcd129009a1c2" name="mingw64-libstdc++" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="27a111cdecb19c57c5a8339dd9c791b344d5c79e9a51f29811d9d650fee37ad9" name="mingw64-pcre" arch="noarch">
  <version epoch="0" ver="8.43" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.43-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 8.43-8" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1058</changelog>
</package>
<package pkgid="7960971dbfeb81d3e1f81336b0e394568f2d67ae1fa0b5f073a79f91efac45c1" name="mingw64-pcre-static" arch="noarch">
  <version epoch="0" ver="8.43" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.43-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 8.43-8" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1058</changelog>
</package>
<package pkgid="4b55d2a25f0f106a3f3c8234e7d0bcf1e90999fd5f44038885406f04c7843f6e" name="mingw64-pcre2" arch="noarch">
  <version epoch="0" ver="10.42" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.37-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.39-1" date="1636113600">- Update to 10.39</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.39-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.39-3" date="1648209600">- Rebuild with mingw-gcc-12</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.40-1" date="1651406400">- Update to 10.40</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.40-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.42-1" date="1673611200">- Update to 10.42</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.42-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.42-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="0c3ed64eaf70c365e73577e9de6a33f942e27ce0441cb3e08cbb5b8452d50e70" name="mingw64-pcre2-static" arch="noarch">
  <version epoch="0" ver="10.42" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.37-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.39-1" date="1636113600">- Update to 10.39</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.39-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.39-3" date="1648209600">- Rebuild with mingw-gcc-12</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.40-1" date="1651406400">- Update to 10.40</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.40-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 10.42-1" date="1673611200">- Update to 10.42</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.42-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.42-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="c2fbf33dbc77425cba74765e158b8483b31db258b2cb1a90921a590dcad78825" name="mingw64-pixman" arch="noarch">
  <version epoch="0" ver="0.42.2" rel="3.el9"/>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 0.42.2-3" date="1699531200">- Bump pixman version 0.42.2
- Drop DesktopQE gating 
- Fix CVEs: CVE-2022-44638
- Resolves: RHEL-5013</changelog>
</package>
<package pkgid="2a11d107c742d63db4789afc6cef09f7b3873bbea6c1b0c538fef3d434c6bc17" name="mingw64-pixman-static" arch="noarch">
  <version epoch="0" ver="0.42.2" rel="3.el9"/>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 0.42.2-3" date="1699531200">- Bump pixman version 0.42.2
- Drop DesktopQE gating 
- Fix CVEs: CVE-2022-44638
- Resolves: RHEL-5013</changelog>
</package>
<package pkgid="e2f79eaf239b957ca31b6420a1bbb90b1fc7d2f98c6765b3e846863144b5ed27" name="mingw64-termcap" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="31.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.1-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 1.3.1-31" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1059</changelog>
</package>
<package pkgid="4547d8649b5d9d19cf7b2b28e5a5cf3acbfc0493a5ec30a924651250b6bec644" name="mingw64-termcap-static" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="31.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.1-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Konstantin Kostiuk &lt;kkostiuk@redhat.com&gt; - 1.3.1-31" date="1691409600">- Update license to SPDX format
- Resolves: RHEL-1059</changelog>
</package>
<package pkgid="1d1cdafd93d9d9080d268f13fb3441f3bdb6057e76f132300a04f86dc8b5849c" name="mingw64-zlib" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.12-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.2.13-1" date="1670932800">- Update to 1.2.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.3.1-1" date="1706702400">- Update to 1.3.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@nil.im&gt; - 1.3.1-2" date="1711713600">- Build UCRT64 package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="17bfce95d5eec825676804258c77cc7deab81c1d5c05a89efc825ed58ca87a29" name="mingw64-zlib-static" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.12-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.2.13-1" date="1670932800">- Update to 1.2.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.3.1-1" date="1706702400">- Update to 1.3.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@nil.im&gt; - 1.3.1-2" date="1711713600">- Build UCRT64 package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="459a015900dd79564e756e9a9cca925280d451e287a89ba81573de296dd5cbbc" name="minizip-compat" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="40.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.11-31" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-32" date="1646136000">- Fix for IBM compressBound() rhbz#2056899</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-33" date="1650888000">- Fix CVE-2018-25032
  Resolves: CVE-2018-25032</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-34" date="1660132800">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-35" date="1665576000">- Fix for IBM strm.adler rhbz#2134074</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-36" date="1671451200">- Inflate small window optimization for IBM z15 rhbz#2154775</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-37" date="1675771200">- Rebased Power 8 optimization patches
- Fix for Unnecessary IFUNC resolver for crc32_z
- Fix for python3.11 broken libxml2 and lxml on s390x</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-38" date="1675771201">- Resolve fuzzing issue for unknown memory access</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-39" date="1675944000">- Fix covscan issue CWE-681</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-40" date="1683201600">- Fix the Crash in zlib deflateBound() function on s390x
- Resolves: BZ#2193044</changelog>
</package>
<package pkgid="cf3271f1d86f0fbedfff0fe7380efb5831ff82218a82774fe90affe77b60b14b" name="minizip-compat-devel" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="40.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.11-31" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-32" date="1646136000">- Fix for IBM compressBound() rhbz#2056899</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-33" date="1650888000">- Fix CVE-2018-25032
  Resolves: CVE-2018-25032</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 1.2.11-34" date="1660132800">- Fix heap-based buffer over-read or buffer overflow in inflate in inflate.c
- Resolves: CVE-2022-37434</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-35" date="1665576000">- Fix for IBM strm.adler rhbz#2134074</changelog>
  <changelog author="Ilya Leoshkevich &lt;iii@linux.ibm.com&gt; - 1.2.11-36" date="1671451200">- Inflate small window optimization for IBM z15 rhbz#2154775</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-37" date="1675771200">- Rebased Power 8 optimization patches
- Fix for Unnecessary IFUNC resolver for crc32_z
- Fix for python3.11 broken libxml2 and lxml on s390x</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-38" date="1675771201">- Resolve fuzzing issue for unknown memory access</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-39" date="1675944000">- Fix covscan issue CWE-681</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 1.2.11-40" date="1683201600">- Fix the Crash in zlib deflateBound() function on s390x
- Resolves: BZ#2193044</changelog>
</package>
<package pkgid="45b94b51dfbc0447ca69caa3d4a60e3c6e78d6c3f0e91408a00dc156d97e64c7" name="mm-common" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.12-4" date="1564056000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.12-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.0-1" date="1586952000">- Update to 1.0.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1591358400">- Update to 1.0.1
- Switch to the meson build system</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-1" date="1601062193">- Update to 1.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.3-1" date="1622030400">- Update to 1.0.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
</package>
<package pkgid="4124b61b0a66b9d42d92df5ccef0dbfe1d0783587ca1e6bc655416e33b53746d" name="mm-common-docs" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.12-4" date="1564056000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.12-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.0-1" date="1586952000">- Update to 1.0.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.1-1" date="1591358400">- Update to 1.0.1
- Switch to the meson build system</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.2-1" date="1601062193">- Update to 1.0.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.0.3-1" date="1622030400">- Update to 1.0.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.3-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
</package>
<package pkgid="ec52057e1b9a679d9ed6ef7cbada98cde0395c2b052fcedeb439d4171a7a148a" name="mockito" arch="noarch">
  <version epoch="0" ver="3.12.4" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.7.13-1" date="1612440000">- Update to upstream version 3.7.13</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.13-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.13-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.13-4" date="1635940800">- Workaround build issue with OpenJDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.13-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.12.4-1" date="1642852800">- Version 3.12.4
- Add inline and junit-jupiter subpackages
- Drop OpenJDK 17 workarounds</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.4-2" date="1643284800">- Don't build mockito-junit-jupiter in bootstrap mode</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.12.4-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 3.12.4-4" date="1649505600">- Set javac compiler release to Java 8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.4-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="411bbae588793f2aad0bfed9e42faf3ce80b9e87cc6c43b7aa5566b6ab3f144d" name="mockito" arch="noarch">
  <version epoch="0" ver="5.8.0" rel="13.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.4-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.4-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.5.0-1" date="1693569600">- Update to upstream version 5.5.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.8.0-1" date="1702468800">- Update to upstream version 5.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.8.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.8.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.8.0-11" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1b8cf51e01502ebd9b862363f1c9fe3e81191612669e9ab26cccb05dd09a2e61" name="mockito-inline" arch="noarch">
  <version epoch="0" ver="3.12.4" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.7.13-1" date="1612440000">- Update to upstream version 3.7.13</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.13-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.13-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.13-4" date="1635940800">- Workaround build issue with OpenJDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.13-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.12.4-1" date="1642852800">- Version 3.12.4
- Add inline and junit-jupiter subpackages
- Drop OpenJDK 17 workarounds</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.4-2" date="1643284800">- Don't build mockito-junit-jupiter in bootstrap mode</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.12.4-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 3.12.4-4" date="1649505600">- Set javac compiler release to Java 8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.4-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="3b6f89b9bafac24d14c53ce33e276022a543e166f4ecc2155ed8dba1d82df3a8" name="mockito-javadoc" arch="noarch">
  <version epoch="0" ver="3.12.4" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.7.13-1" date="1612440000">- Update to upstream version 3.7.13</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.13-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.13-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.13-4" date="1635940800">- Workaround build issue with OpenJDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.13-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.12.4-1" date="1642852800">- Version 3.12.4
- Add inline and junit-jupiter subpackages
- Drop OpenJDK 17 workarounds</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.4-2" date="1643284800">- Don't build mockito-junit-jupiter in bootstrap mode</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.12.4-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 3.12.4-4" date="1649505600">- Set javac compiler release to Java 8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.4-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="8713d7f0adab8f0a1d4f92517eea1dee3ce36d6ab0a96e61141be1ff259af40e" name="mockito-javadoc" arch="noarch">
  <version epoch="0" ver="3.7.13" rel="5.el9"/>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 2.28.2-1" date="1597406400">- Update to version 2.28.2</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.5.5-1" date="1598184000">- Update to version 3.5.5</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.5.13-1" date="1601467200">- Update to ustream version 3.5.13</changelog>
  <changelog author="Stuart Gathman &lt;stuart@gathman.org&gt; - 3.5.13-1" date="1602244800">- Update to version 3.5.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.13-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.7.13-1" date="1612440000">- Update to upstream version 3.7.13</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.13-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.13-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.13-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.7.13-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8c60cf621930ca6e749c74f3a3774ef91b7953ab868f8a265bcd4c1a6479324e" name="mockito-javadoc" arch="noarch">
  <version epoch="0" ver="5.8.0" rel="13.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.4-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.4-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.5.0-1" date="1693569600">- Update to upstream version 5.5.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.8.0-1" date="1702468800">- Update to upstream version 5.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.8.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.8.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.8.0-11" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="28ce272ccbfd7962d50881f55b939d1e921069eb853abb21fa3ed863058ed42e" name="mockito-junit-jupiter" arch="noarch">
  <version epoch="0" ver="3.12.4" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.7.13-1" date="1612440000">- Update to upstream version 3.7.13</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.13-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.13-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.7.13-4" date="1635940800">- Workaround build issue with OpenJDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.7.13-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jerry James &lt;loganjerry@gmail.com&gt; - 3.12.4-1" date="1642852800">- Version 3.12.4
- Add inline and junit-jupiter subpackages
- Drop OpenJDK 17 workarounds</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.12.4-2" date="1643284800">- Don't build mockito-junit-jupiter in bootstrap mode</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.12.4-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 3.12.4-4" date="1649505600">- Set javac compiler release to Java 8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.4-5" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="46be5c1333b4fa31dd545a1178f55463083b155cfc71d9e8d08fe98ee4459c02" name="mockito-junit-jupiter" arch="noarch">
  <version epoch="0" ver="5.8.0" rel="13.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.4-6" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.12.4-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.5.0-1" date="1693569600">- Update to upstream version 5.5.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 5.8.0-1" date="1702468800">- Update to upstream version 5.8.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.8.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 5.8.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8.0-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 5.8.0-11" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="cc7784f3e9018c844aed43fd90a86bb8d14b04ce256b020380d45c50b7cc2d57" name="modello" arch="noarch">
  <version epoch="0" ver="1.11" rel="8.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-2" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.10.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.11-1" date="1589457600">- Update to version 1.11.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.11-2" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.11-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.11-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-6" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-7" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="df18d636f369ca5d68a8e19ffb4239efaf766448a1958786397714a7492a8a83" name="modello" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.11-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.11-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.11-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0-1" date="1650628800">- Update to upstream version 2.0.0
- Remove dependency on Jsoup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="14121ffaa576784ce53382d6ba4969e6a5e7474678879519f1f2bac06d7b4443" name="modello" arch="noarch">
  <version epoch="0" ver="2.1.2" rel="20.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-7" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-9" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-10" date="1724241600">- Fix for Sisu 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-18" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="337b204c7a10be93cede998df784ceea1fb37dafb83eba3392ce6f1b3b38cade" name="modello-javadoc" arch="noarch">
  <version epoch="0" ver="1.11" rel="8.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-2" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.10.0-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.11-1" date="1589457600">- Update to version 1.11.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.11-2" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.11-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.11-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-6" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-7" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8eb01353c780cec079028c47b3a66de4cc4655af02f10960b6adf7305fe4c0d0" name="modello-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.11-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.11-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11-6" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11-7" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.11-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0-1" date="1650628800">- Update to upstream version 2.0.0
- Remove dependency on Jsoup</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5e2d365df1f324868acaa86c852be925828feed8e9b890475876b9412faf5cd8" name="modello-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.2" rel="20.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.2-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-7" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.2-8" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-9" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-10" date="1724241600">- Fix for Sisu 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.2-18" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="6e3d99e54b8b6222a0cb04e1c5c9dece6910b34c93c91e5a3d608049e2454e4d" name="moditect" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.0.0-1" date="1689595200">- Initial build</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.0.0-2" date="1692705600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.0-3" date="1701691200">- Implement bootstrap mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.0-1" date="1706788800">- Update to upstream version 1.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.0-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="3dc4fea54798fbb564511872e1e15979f56c7ad3bb663f693ac4b5660132aeac" name="moditect-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.0.0-1" date="1689595200">- Initial build</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.0.0-2" date="1692705600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.0-3" date="1701691200">- Implement bootstrap mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.1.0-1" date="1706788800">- Update to upstream version 1.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.0-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c5fc98f003a947fbf43d70207e4893d8c29d994fde250d6266f566ddcd1a9d64" name="modulemaker-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.11" rel="7.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.9-2" date="1676548800">- Initial build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9-2" date="1677153600">- Implement bootstrap mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.9-6" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11-1" date="1708776000">- Update to upstream version 1.11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="7f2d02e971804ac8049ac2b4df81eae1e23a849a31959d241bb9fdc3bbd57062" name="modulemaker-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="1.11" rel="7.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.9-2" date="1676548800">- Initial build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9-2" date="1677153600">- Implement bootstrap mode</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.9-6" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.11-1" date="1708776000">- Update to upstream version 1.11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.11-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="07275b72a442445ba5ad6c72d5e7ebd42603f44faf5936ffdac7840ec489cff3" name="mojo-parent" arch="noarch">
  <version epoch="0" ver="67" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 50-1" date="1596024000">- Update to upstream version 50</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 60-1" date="1611662400">- Update to upstream version 60</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 50-4" date="1611662401">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 60-1" date="1612180800">- Update to version 60.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 60-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 60-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 60-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 60-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 67-1" date="1651665600">- Update to upstream version 67</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 67-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="883565d059c5a6da75b015c068e5fc54d75e15f844e4cee34bf544740edbddf3" name="mojo-parent" arch="noarch">
  <version epoch="0" ver="85" rel="2.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 77-1" date="1697716800">- Update to upstream version 77</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 77-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 77-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 78-1" date="1706788800">- Update to upstream version 78</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 78-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 78-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 84-1" date="1718712000">- Update to upstream version 84</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 84-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 85-1" date="1724414400">- Update to upstream version 85
- Resolves: rhbz#2304212</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 85-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="2453897869db5195ac36955b0a82595df102bccd37ed6019fbd511464730e062" name="motif-static" arch="aarch64">
  <version epoch="0" ver="2.3.4" rel="32.el9"/>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 2.3.4-28" date="1701086400">- Fix CVE-2023-43788: out of bounds read in XpmCreateXpmImageFromBuffer()
- Fix CVE-2023-43789: out of bounds read on XPM with corrupted colormap</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.3.4-29" date="1732536000">- Add Xinerama support (RHEL-69956)</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.3.4-30" date="1748865600">- Keep drop-down menus on the same monitor as the pull-down button with
  Xinerama
  Resolves: RHEL-92832</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.3.4-31" date="1751025600">- Fix a memory leak with UTF-8 strings
  Resolves: RHEL-100816</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 2.3.4-32" date="1757073600">- Add support for _NET_WORKAREA and _GTK_WORKAREAS
  Resolves: RHEL-100836</changelog>
</package>
<package pkgid="adf1dca0b0c3607fc6f80f051f0b05899ca4a64923362257faeecf80d97dd7f3" name="mpeg2dec" arch="aarch64">
  <version epoch="0" ver="0.5.1" rel="24.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-20" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-21" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-22" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.5.1-23" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.5.1-24" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6103eb436b1ddf1d97bd2150b42fc4dbc5272a6389d0aea46631227951fe1cf6" name="mpfr-doc" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="10.el9"/>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-8" date="1765368000">- fix use of uninitialized value in sin_cos (RHEL-35392)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-9" date="1769515200">- add /usr/share/doc/mpfr ownership (RHEL-36690)</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 4.1.0-10" date="1770638400">- add /usr/share/doc/mpfr ownership to the doc subpackage as well (RHEL-36690)</changelog>
</package>
<package pkgid="e8284bd14ba7fa80415659c6e0400dcdef459620165f63717a65c6c43ea2406c" name="mptcpd-devel" arch="aarch64">
  <version epoch="0" ver="0.8" rel="3.el9"/>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.5.1-1" date="1611144000">- initial build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.6-1" date="1615982400">- update to version 0.6</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.6-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.7-1" date="1619611200">- update to version 0.7</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.7-2" date="1624449600">- add a simple sanity test and enable gating. Related: rhbz#1962741
- don't overwrite global build options. Related: rhbz#1967697
- fix 'check_conflicts' on multilib. Related: rhbz#1967697</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.8-1" date="1632916800">- update to version 0.8</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.8-2" date="1638273600">- fix mptcpize to work also when protocol number is 0 (upstream issue #159)
  and when command resides in another file system (upstream issue #161)
  Related: rhbz#2015623</changelog>
  <changelog author="Davide Caratti &lt;dcaratti@redhat.com&gt; - 0.8-3" date="1657108800">- workaround for uAPI header build issue</changelog>
</package>
<package pkgid="c79fef1cd4ba28fb4f1769e905801beda95265e02c2f74a3e86c2ddbd8718980" name="msghack" arch="noarch">
  <version epoch="0" ver="0.21" rel="8.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-5" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Sundeep Anand &lt;suanand@redhat.com&gt; - 0.21-6" date="1621252800">- Add gettext-0.21-covscan.patch to fix issues detected by static analyzers
  Add gettext-0.21-disable-libtextstyle.patch
  Do not build libtextstyle, as it depends on libcroco
  which is now unmaintained and has known security bugs.
  Obsolete libtextstyle and libtextstyle-devel packages.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 0.21-8" date="1680177600">- add Java 17 support patch from Mamoru Tasaka (rhbz#2182696)</changelog>
</package>
<package pkgid="6122e429694936c843324f8983c5ea690f16c92c124860a0e85662904de8b116" name="msitools" arch="aarch64">
  <version epoch="0" ver="0.101.85" rel="5.el9"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.100-7" date="1601812800">- Fix FTBFS. rhbz#1864178
- Drop mingw-gstreamer* checks, it's outdated.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.100-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101-1" date="1612267200">- new version v0.101
- Fix FTBFS. rhbz#1923683</changelog>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 0.101-2" date="1612353600">- Fix enablement of wxi tests
- Use perl-base and gettext for more minimal dep chain</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101.27-1" date="1624881600">- Fix FTBFS. rhbz#1943037</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101.27-2" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101.32-1" date="1627819200">- Fix FTBFS. rhbz#1987721</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.101.32-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.101.32-3" date="1643457600">- Fix FTBFS. rhbz#2046759</changelog>
  <changelog author="Yan Vugenfirer &lt;yvugenfi@redhat.com&gt; - 0.101.85-4" date="1645617600">- Add gating and fix gating errors. rhbz#2047292</changelog>
</package>
<package pkgid="6555b2f47a9d9db8a546c2178565ae0a8462290cf735beaeaa1710aecb148b8f" name="munge-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.0" rel="23.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-13" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.0-15" date="1573992000">- Remove unnecessary dependency on parent POM.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-16" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.0-17" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-18" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-19" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-21" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-22" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0-23" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="401a2fe6101e0da6c711575f359d2aed4160f58747f282a74c1c368e8c8fd603" name="munge-maven-plugin" arch="noarch">
  <version epoch="0" ver="1.0" rel="25.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-18" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-19" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-21" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-22" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-23" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.0-24" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-25" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="deb2ffe458f8ebfff642c8255627dd9fc5737fea930d3e4edf2d8f7d1cccac4a" name="munge-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="1.0" rel="23.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-13" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.0-15" date="1573992000">- Remove unnecessary dependency on parent POM.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-16" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.0-17" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-18" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-19" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-21" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-22" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0-23" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="eb6e706461e6d269d5cf45753bba97872a4ff18dadb8892aa1f2f47f8321a292" name="munge-maven-plugin-javadoc" arch="noarch">
  <version epoch="0" ver="1.0" rel="25.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-18" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-19" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-20" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-21" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0-22" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-23" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.0-24" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0-25" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="25bcb8d9d0628d1e778383e5668e83bd7607e1a0666c30c7c321b2887d45ed05" name="mutter-tests" arch="aarch64">
  <version epoch="0" ver="40.9" rel="32.el9"/>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-23" date="1730462400">- Backport fix for flicker-free login
  Resolves: RHEL-10895</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-24" date="1738065600">- Fix stuck modifier keys
  Resolves: RHEL-21286</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-25" date="1745496000">- Do not disable touchscreen on DPMS off if touch-mode is disabled
  Resolves: RHEL-31742</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-26" date="1747051200">- Fix polyinstantiation preventing Xwayland to start
  Resolves: RHEL-90588</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-27" date="1751025600">- Backport fixes for cogl OpenGL conformance
  Resolves: RHEL-4521</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 40.9-28" date="1751371200">- Backport fix for screen not refreshing properly
  Resolves: RHEL-89352</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-29" date="1758715200">- Fix input latency regression
  Resolves: RHEL-117098</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-30" date="1762776000">- Fix handling of more WM_HINTS window icon types
  Resolves: RHEL-70872</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-31" date="1763640000">- Backport linux-dmabuf v4 support to restore hardware acceleration
  in Xwayland 24.1 with Mesa 25.2
  Resolves: RHEL-129832</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-32" date="1764244800">- Sanity check input on workspace activation API
  Related: RHEL-68825</changelog>
</package>
<package pkgid="c8d45b9701113e3fa21f96717326699499dd11231e7478bba98c8bb426f0a0d9" name="mutter-tests" arch="aarch64">
  <version epoch="0" ver="40.9" rel="33.el9_8"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-24" date="1738065600">- Fix stuck modifier keys
  Resolves: RHEL-21286</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-25" date="1745496000">- Do not disable touchscreen on DPMS off if touch-mode is disabled
  Resolves: RHEL-31742</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-26" date="1747051200">- Fix polyinstantiation preventing Xwayland to start
  Resolves: RHEL-90588</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-27" date="1751025600">- Backport fixes for cogl OpenGL conformance
  Resolves: RHEL-4521</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 40.9-28" date="1751371200">- Backport fix for screen not refreshing properly
  Resolves: RHEL-89352</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-29" date="1758715200">- Fix input latency regression
  Resolves: RHEL-117098</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-30" date="1762776000">- Fix handling of more WM_HINTS window icon types
  Resolves: RHEL-70872</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-31" date="1763640000">- Backport linux-dmabuf v4 support to restore hardware acceleration
  in Xwayland 24.1 with Mesa 25.2
  Resolves: RHEL-129832</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-32" date="1764244800">- Sanity check input on workspace activation API
  Related: RHEL-68825</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-33" date="1780401600">- Don't unminimize mapped windows
  Resolves: RHEL-180797</changelog>
</package>
<package pkgid="4c50c83ec202a0cadc028e58ac40772656dd92b651bce008b9bb44eac0b8528a" name="mutter-tests" arch="aarch64">
  <version epoch="0" ver="40.9" rel="34.el9_8"/>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-25" date="1745496000">- Do not disable touchscreen on DPMS off if touch-mode is disabled
  Resolves: RHEL-31742</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-26" date="1747051200">- Fix polyinstantiation preventing Xwayland to start
  Resolves: RHEL-90588</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-27" date="1751025600">- Backport fixes for cogl OpenGL conformance
  Resolves: RHEL-4521</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 40.9-28" date="1751371200">- Backport fix for screen not refreshing properly
  Resolves: RHEL-89352</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-29" date="1758715200">- Fix input latency regression
  Resolves: RHEL-117098</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-30" date="1762776000">- Fix handling of more WM_HINTS window icon types
  Resolves: RHEL-70872</changelog>
  <changelog author="Olivier Fourdan &lt;ofourdan@redhat.com&gt; - 40.9-31" date="1763640000">- Backport linux-dmabuf v4 support to restore hardware acceleration
  in Xwayland 24.1 with Mesa 25.2
  Resolves: RHEL-129832</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-32" date="1764244800">- Sanity check input on workspace activation API
  Related: RHEL-68825</changelog>
  <changelog author="Jonas &#xC5;dahl &lt;jadahl@redhat.com&gt; - 40.9-33" date="1780401600">- Don't unminimize mapped windows
  Resolves: RHEL-180797</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 40.9-34" date="1783598400">- Switch stylus button order to match Xorg session
  Related: RHEL-190440</changelog>
</package>
<package pkgid="2dc49b59cf590bc8b77ab462560e38208c964bdff696c3fc946f4e0d16c03c0a" name="mypaint-brushes-devel" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="6.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.3.1-1" date="1583409600">- Update to 1.3.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-5" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1.3.1-6" date="1644408000">- add gating.yaml file</changelog>
</package>
<package pkgid="2dc2b4f4ee69e01de394aa0b948603f1abfde9588486a737474eaebc55a10f8f" name="mythes-lb" arch="noarch">
  <version epoch="0" ver="0.20121128" rel="17.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20121128-13" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20121128-14" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20121128-15" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.20121128-16" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.20121128-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="299551bc47d8c68cdb7569752e338413b343af5985bb77138a092116939a79e0" name="nasm-rdoff" arch="aarch64">
  <version epoch="0" ver="2.15.03" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.02-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Igor Raits &lt;ignatenkobrain@fedoraproject.org&gt; - 2.15.03-1" date="1595073600">- Update to 2.15.03</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.03-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 2.15.03-3" date="1608292800">- Patch to workaround renamed SourceSans font family</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.03-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Nick Clifton &lt;nickc@redhat.com&gt; - 2.15.03-5" date="1615291200">- Default to building without documentation for RHEL.  (#1933222)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.03-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.15.03-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6ce52b0ff375b8296f9612f211e5c2c740185d0439b69121bb6232ee3d6ed592" name="nbdkit-blkio-plugin" arch="aarch64">
  <version epoch="0" ver="1.38.5" rel="12.el9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.3-1" date="1721995200">- Rebase to 1.38.3 (along stable branch)
- Send the last error to the NBD client
  resolves: RHEL-50664</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-1" date="1727524800">- Rebase to 1.38.5 (along stable branch)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-2" date="1736164800">- vddk: Avoid reading partial chunk beyond the end of the disk
  resolves: RHEL-71694</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-6" date="1746100800">- Add extra system call checking and debugging to nbdkit-file-plugin
  resolves: RHEL-85510
- Allow nbdkit-file-plugin to zero and trim block devices
  resolves: RHEL-89353</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-7" date="1748865600">- vddk: Pre-cache the extents for readonly connections
  resolves: RHEL-94823</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-8" date="1749124800">- Log filename, offset and count in nbdkit-file-plugin error messages
  resolves: RHEL-95363</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-9" date="1749384000">- vddk: Improve statistics
  related: RHEL-94823</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-10" date="1749470400">- CVE-2025-47711 denial of service attack by client sending maximum size block
  status
- CVE-2025-47712 denial of service attack by client sending large unaligned
  size block status
  resolves: RHEL-95814</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-11" date="1750680000">- Add support for VDDK 9.0.0.0
  resolves: RHEL-99466</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-12" date="1751716800">- server: Fix .zero fallback path
  resolves: RHEL-101635</changelog>
</package>
<package pkgid="63ace393d7956fefad00716222d92d0088597760acf981711a0a5c65839141bb" name="nbdkit-stats-filter" arch="aarch64">
  <version epoch="0" ver="1.38.5" rel="12.el9"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.3-1" date="1721995200">- Rebase to 1.38.3 (along stable branch)
- Send the last error to the NBD client
  resolves: RHEL-50664</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-1" date="1727524800">- Rebase to 1.38.5 (along stable branch)</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-2" date="1736164800">- vddk: Avoid reading partial chunk beyond the end of the disk
  resolves: RHEL-71694</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-6" date="1746100800">- Add extra system call checking and debugging to nbdkit-file-plugin
  resolves: RHEL-85510
- Allow nbdkit-file-plugin to zero and trim block devices
  resolves: RHEL-89353</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-7" date="1748865600">- vddk: Pre-cache the extents for readonly connections
  resolves: RHEL-94823</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-8" date="1749124800">- Log filename, offset and count in nbdkit-file-plugin error messages
  resolves: RHEL-95363</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-9" date="1749384000">- vddk: Improve statistics
  related: RHEL-94823</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-10" date="1749470400">- CVE-2025-47711 denial of service attack by client sending maximum size block
  status
- CVE-2025-47712 denial of service attack by client sending large unaligned
  size block status
  resolves: RHEL-95814</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-11" date="1750680000">- Add support for VDDK 9.0.0.0
  resolves: RHEL-99466</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1.38.5-12" date="1751716800">- server: Fix .zero fallback path
  resolves: RHEL-101635</changelog>
</package>
<package pkgid="0a8dcd502ef0fc52c6ccc78ee3471d085af36f4de5a0a118ce02b1ee15fe9fc0" name="ncompress" arch="aarch64">
  <version epoch="0" ver="4.2.4.4" rel="21.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.4.4-17" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.4.4-18" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.4.4-19" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.2.4.4-20" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.2.4.4-21" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="37a5fb86657341291ec87c238d636a436d869dd71b4eb33d76361edc56276c28" name="ncurses-compat-libs" arch="aarch64">
  <version epoch="0" ver="6.2" rel="12.20210508.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-9.20210508" date="1692014400">- fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
- ignore TERMINFO and HOME environment variables if running as root (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-10.20210508" date="1692619200">- ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-11.20210508" date="1750939200">- guard against corrupt terminfo data in string conversion (CVE-2022-29458
  RHEL-100135)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-12.20210508" date="1751371200">- remove execute permissions from ANNOUNCE file (RHEL-101067)</changelog>
</package>
<package pkgid="44af9acdc4434ea58021787d1dd82813a09a7227f379133e8702999aaa7f2f2e" name="ncurses-static" arch="aarch64">
  <version epoch="0" ver="6.2" rel="12.20210508.el9"/>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-9.20210508" date="1692014400">- fix buffer overflow on terminfo with too many capabilities (CVE-2023-29491)
- ignore TERMINFO and HOME environment variables if running as root (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-10.20210508" date="1692619200">- ignore TERMINFO and HOME only if setuid/setgid/capability (#2211666)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-11.20210508" date="1750939200">- guard against corrupt terminfo data in string conversion (CVE-2022-29458
  RHEL-100135)</changelog>
  <changelog author="Miroslav Lichvar &lt;mlichvar@redhat.com&gt; 6.2-12.20210508" date="1751371200">- remove execute permissions from ANNOUNCE file (RHEL-101067)</changelog>
</package>
<package pkgid="839b32a6d420ff52077aa81c5b7a5e86b300172c56ce12ebf22a2b572ecc1a19" name="net-snmp-gui" arch="aarch64">
  <version epoch="1" ver="5.9.1" rel="21.el9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.9.1-14" date="1712664000">- fix CVE-2022-24805, CVE-2022-24806, CVE-2022-24807, CVE-2022-24808,
  CVE-2022-24809 and CVE-2022-24810 (RHEL-26649)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.9.1-15" date="1712664001">- fix changelog issue</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.9.1-16" date="1718971200">- fix unexpected header length in /proc/net/snmp (RHEL-44357)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.9.1-17" date="1721131200">- fix segfault with error on subcontainer (RHEL-46033)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.9.1-18" date="1761134400">- fix inverted usage of -n in snmptrapd (RHEL-101078)
- fix use after free issue (RHEL-121091)
- fix help and manpage for net-snmp-create-v3-user 
  script(RHEL-101614 and RHEL-103557)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.9.1-19" date="1762257600">- remove wrong assert (RHEL-122095)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.9.1-20" date="1768305600">- fix out of bound access issue (RHEL-137511)
- enable PQC (RHEL-132653)</changelog>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 1:5.9.1-21" date="1770033600">- fix creation of /var/lib/net-snmp in image mode (RHEL-132655)</changelog>
</package>
<package pkgid="cb38032ee5c0573be0cf63a61c35e45230bf00a2639d889799f7d84881e9bb2d" name="network-scripts" arch="aarch64">
  <version epoch="0" ver="10.11.8" rel="4.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.6-1" date="1707393600">- Add -r to while read as per shellcheck
- Fix splitting spaces in paths from statetab files</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.7-1" date="1709726400">- rename_device: free path after it is used
- rename_device: remove trailing whitespaces</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-1" date="1724760000">- netconsole: var/lock -&gt; run/lock
- netconsole: source sysconfig/network only if it exists
- netconsole: remove unused variables
- netconsole: remove trailing whitespaces
- sync spec with c9s</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-2" date="1724760001">- version bump</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-3" date="1724932800">- version bump</changelog>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 10.11.8-4" date="1725278400">- version bump</changelog>
</package>
<package pkgid="841987e368206ceb8dad5ab2bb895121e07418858af3e98f280621a435c68196" name="network-scripts-ppp" arch="aarch64">
  <version epoch="0" ver="2.4.9" rel="5.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-4" date="1586174400">- Updated EAP-TLS patch to v1.201</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-5" date="1586260800">- Updated EAP-TLS patch to v1.300</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-6" date="1590062400">- Added missing options to man pages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.8-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.8-8" date="1597060800">- Added workaround for Windows Server 2019
  Resolves: rhbz#1867047</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.4.9-1" date="1609848000">- New version
  Resolves: rhbz#1912617</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.9-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.9-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.9-4" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.9-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9d0571cb5eed27ad4190ac391ddbec522b264df11da38ff6c730fc351472ed06" name="network-scripts-teamd" arch="aarch64">
  <version epoch="0" ver="1.31" rel="16.el9_1"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-7" date="1623931200">- gating: fix the wrong link of openvswitch for RHEL-9 [1970175]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-8" date="1627473600">- Build util team2bond in teamd rpm [1986788]
- Add some cautions to util team2bond [1986788]
- Add team2bond man doc [1986788]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.31-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-10" date="1629115200">- Remove an extra line in spec file</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-11" date="1636977600">- Revert "teamd: Disregard current state when considering port enablement" [1894546]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-12" date="1646654400">- utils/team2bond: do not add miimon if already exist (rhbz#2060445)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-13" date="1652702400">- utils/team2bond: do not add updelay/downdelay if already exist (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-14" date="1655121600">- Rebuilt with a new version to pass the fixed gating test (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-15" date="1670241600">- teamd: do no remove the ports on shutdown with -N (rhbz#2148854)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-16" date="1670328000">- fix the Requires package name for teamd-devel
- teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)</changelog>
</package>
<package pkgid="62f761ddf0ede5148ea80e0705e77884320ce1927754753e1a7cd646378bcb44" name="nfs-stats-utils" arch="aarch64">
  <version epoch="1" ver="2.5.4" rel="42.el9_8"/>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-33" date="1739620800">- Add nfs.conf to nfsv4-client-utils package (RHEL-72013)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-34" date="1739707200">- mountstats/nfsiostat: bugfixes for iostat (RHEL-72243)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-35" date="1745323200">- nfs(5): Add new rdirplus functionality, clarify (RHEL-87143)
- nfsd: allow more than 64 backlogged connections (RHEL-87752)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-36" date="1745582400">- mountstats: verify that old and new types are the same (RHEL-88553)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-37" date="1745668800">- gssd.man: add documentation for use-gss-proxy nfs.conf option (RHEL-85408)
- gssd: do not use krb5_cc_initialize (RHEL-85412)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-38" date="1749729600">- ensure services are stopped when nfs-utils is uninstalled (RHEL-88422)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-39" date="1758196800">- Fix dependency definition in rpc-statd.service (RHEL-116079)</changelog>
  <changelog author="Steve Dickson &lt;steved@redhat.com&gt; 2.5.4-40" date="1765195200">- nfsrahead: modify get_device_info logic (RHEL-134397)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-41" date="1767960000">- gssd: protect kerberos ticket cache access (RHEL-138462)</changelog>
  <changelog author="Scott Mayhew &lt;smayhew@redhat.com&gt; 2.5.4-42" date="1772798400">- Replace statfs64 with statfs (RHEL-127105)
- NFS export symlink vulnerability fix (RHEL-127105)
- mountd: Minor refactor of get_rootfh() (RHEL-127105)
- mountd: Separate lookup of the exported directory and the mount path (RHEL-127105)
- support: Add a mini-library to extract and apply RPC credentials (RHEL-127105)
- Fix access checks when mounting subdirectories in NFSv3 (RHEL-127105)
- Add requires for selinux-policy (RHEL-127105)
  Resolves: CVE-2025-12801</changelog>
</package>
<package pkgid="2786047c2dbb5d7f7ca7bdf7ed7700552d5ca62f672e48fc4c9f7091c71c211f" name="nginx-mimetypes" arch="noarch">
  <version epoch="0" ver="2.1.49" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.48-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 2.1.49-1" date="1587556800">- Rebase to 2.1.49</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.49-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.49-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1.49-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.1.49-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="270211ff88b8cee8947abc21f4d2cfe92c0da5899fe2b1956839779c5dae7224" name="nm-connection-editor-desktop" arch="aarch64">
  <version epoch="0" ver="1.26.0" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-3.2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.18.0-4" date="1612267200">- Move desktop file to new nm-connection-editor-desktop package (rh #1923262)</changelog>
  <changelog author="Thomas Haller &lt;thaller@redhat.com&gt; - 1.20.0-1" date="1612353600">- Update to 1.20.0 release
- Drop NotShowIn=GNOME
- Use wireless-security code from libnma
- Add flatpak build configuration
- applet: hide unmanaged ethernet devices in nm-applet
- applet: fix Wi-Fi scan requests with appindicator
- editor: fix drop down list for connection.secondaries</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.20.0-4.1" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Wen Liang &lt;wenliang@redhat.com&gt; - 1.22.0-1" date="1625486400">- Update to 1.22.0 release.
- editor: show missing toggle in the 8021x-security page.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.22.0-1.2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Beniamino Galvani &lt;bgalvani@redhat.com&gt; - 1.24.0-1" date="1629201600">- Update to 1.24.0 release</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.24.0-2" date="1645531200">- Fix OWE settings disappearing on nm-connection-editor (rh #2057004)</changelog>
  <changelog author="Ana Cabral &lt;acabral@redhat.com&gt; - 1.26.0-1" date="1647950400">- Update to 1.26.0 release (rh #2066750)</changelog>
  <changelog author="Lubomir Rintel &lt;lkundrak@v3.sk&gt; - 1.26.0-2" date="1665144000">- Update Japanese translation (rh #2083047)</changelog>
</package>
<package pkgid="37d4ec2f63835c907dc03901bc2d8565c4482133d5e8e158569f016fa9aaf65d" name="nodejs-devel" arch="aarch64">
  <version epoch="1" ver="16.20.2" rel="8.el9_4"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.1-1" date="1689249600">- Rebase to 16.20.1
  Resolves: rhbz#2188291
  Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
- Replace /usr/etc/npmrc symlink with builtin configuration
  Resolves: rhbz#2177781</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:16.20.1-2" date="1690804800">- Fix segfault that happens when processing fips-related options
  Resolves: BZ#2227796</changelog>
  <changelog author="Zuzana Svetlikova &lt;zsvetlik@redhat.com&gt; - 1:16.20.2-1" date="1693396800">- Rebase to 16.20.2
  Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-2" date="1697112000">- Update bundled nghttp2 to 1.57.0 (CVE-2023-44487)</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-3" date="1697198400">- Update version of bundled nghttp2 in spec file</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:16.20.2-4" date="1709640000">- Fix CVE-2024-22019</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-5" date="1712577600">- Backport patches for several CVEs.
  Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-6" date="1712664000">- Use system OpenSSL configuration section</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-7" date="1713960000">- Backport patch for CVE-2024-27982</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-8" date="1715083200">- Actually apply the patch for CVE-2024-27982</changelog>
</package>
<package pkgid="f59705d27855b946c6d197e24eede7359cac75b4b0d863601b4a17af70e62846" name="nodejs-packaging" arch="noarch">
  <version epoch="0" ver="2021.06" rel="4.el9"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 24-1" date="1598961600">- Check node_modules_prod for bundled dependencies</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 25-1" date="1599048000">- Fix incorrect bundled library detection for Requires</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2020.09-1" date="1600430400">- Move to dist-git as the upstream</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2021.01" date="1609934400">- Add nodejs-packaging-bundler and update README.md</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.01-2" date="1611144000">- nodejs-packaging-bundler improvements to handle uncommon characters</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2021.01-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.06-1" date="1622635200">- Update to 2021.06-1
- bundler: Handle archaic license metadata
- bundler: Warn about bundled dependencies with no license metadata</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.06-2" date="1624363200">- Fix hard-coded output directory in the bundler</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2021.06-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.06-4" date="1642680000">- NPM bundler: also find namespaced bundled dependencies</changelog>
</package>
<package pkgid="2230caf6d7fd5dde6c8508a4af3c624ef01655a1225517b719b6935f3defb4a6" name="nodejs-packaging-bundler" arch="noarch">
  <version epoch="0" ver="2021.06" rel="4.el9"/>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 24-1" date="1598961600">- Check node_modules_prod for bundled dependencies</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 25-1" date="1599048000">- Fix incorrect bundled library detection for Requires</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2020.09-1" date="1600430400">- Move to dist-git as the upstream</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 2021.01" date="1609934400">- Add nodejs-packaging-bundler and update README.md</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.01-2" date="1611144000">- nodejs-packaging-bundler improvements to handle uncommon characters</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2021.01-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.06-1" date="1622635200">- Update to 2021.06-1
- bundler: Handle archaic license metadata
- bundler: Warn about bundled dependencies with no license metadata</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.06-2" date="1624363200">- Fix hard-coded output directory in the bundler</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2021.06-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 2021.06-4" date="1642680000">- NPM bundler: also find namespaced bundled dependencies</changelog>
</package>
<package pkgid="be6a8863a0adc9cca29a8f51199c7aead06fa306c881754aaafc0cc3cd27a7fb" name="nss-pkcs11-devel" arch="aarch64">
  <version epoch="0" ver="3.112.0" rel="8.el9_4"/>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 3.101.0-9" date="1731326400">- Add SEC_OID_CURVE25519 to FIPS checks.
- This will mark algorithms using it as FIPS unapproved.</changelog>
  <changelog author="Frantisek Krenzelok &lt;krenzelok.frantisek@gmail.com&gt; - 3.101.0-10" date="1731326401">- Allow RSA-OAEP in FIPS mode</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-1" date="1752494400">- rebase to NSS 3.112
- add ml-kem-1024 support
- add ml-dsa support</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-2" date="1753876800">- add fips required changes.
- fix bugs found by QE</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-3" date="1754049600">- restore CONCATENATE functions accidentally removed in the last patch
- fix big endian issue in tstclnt and selfserv in certificate compression</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-4" date="1754568000">- fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-5" date="1762862400">- fips update
-   Fix indicators for the new post-quantum algorithms
-   Fix the ML-KEM Self-tests
-   Fix the ML-KEM zeroizaiton
-   Add partial public validation before OAEP
- bug fixes
-   add CKA_SEED to private attributes so they are updated on password change.
-   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
-   fix unrefrence read in leancrypto.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-6" date="1767960000">- fix a null in ml-dsa pkcs12 decode
- fix return code in ml-kem pct</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-7" date="1768564800">- fix regression in -5 bug fix</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-8" date="1769169600">- fix incomplete ml-kem pct patch.</changelog>
</package>
<package pkgid="5f74d002c2f14fa03d5c04d30572dce42ea5cda510a191be3419b56e4374d7f7" name="nss-pkcs11-devel" arch="aarch64">
  <version epoch="0" ver="3.124.0" rel="5.el9_6"/>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-4" date="1754568000">- fix interface issue when pulling 3.0 pkcs#11 interfaces explicitly</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-5" date="1762862400">- fips update
-   Fix indicators for the new post-quantum algorithms
-   Fix the ML-KEM Self-tests
-   Fix the ML-KEM zeroizaiton
-   Add partial public validation before OAEP
- bug fixes
-   add CKA_SEED to private attributes so they are updated on password change.
-   mark CKA_PARAMETER_SET as CK_ULONG when storing into the database
-   fix unrefrence read in leancrypto.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-6" date="1767960000">- fix a null in ml-dsa pkcs12 decode
- fix return code in ml-kem pct</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-7" date="1768564800">- fix regression in -5 bug fix</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.112.0-8" date="1769169600">- fix incomplete ml-kem pct patch.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.124.0-1" date="1780401600">- rebase to upstream NSS 3.124
- backport ml-dsa support that is not upstream yet.
- pick up in process patches upstream including eddsa</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.124.0-2" date="1781006400">- rebase fixes
- restore rhel-9 dropping of pkcs12 and smime policy
- restore mlkem aliases
- add mlkem key lengths to the mechanism info
- fix crash if you try to encapsulate with an unimported
  public key
- restore distrusted certs to certdata.txt even though we
  never reference them to make tests happy.</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.124.0-3" date="1781006401">- drop crmf</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.124.0-4" date="1781611200">- fix pkcs12 defaults
- fix pss issues</changelog>
  <changelog author="Bob Relyea &lt;rrelyea@redhat.com&gt; - 3.124.0-5" date="1782129600">- fix pss issues (again)</changelog>
</package>
<package pkgid="b79a2b6d78a796c6472887af2f59ae69b53d8da4d92c9e702f938a364ce99850" name="objectweb-asm" arch="noarch">
  <version epoch="0" ver="9.3" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 9.1-1" date="1613736000">- Update to latest upstream release</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 9.1-1" date="1620993600">- Update to upstream version 9.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.2-1" date="1635854400">- Update to upstream version 9.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.2-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 9.2-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.3-1" date="1652097600">- Update to upstream version 9.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.3-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="81921bd0d7eb676c2bd2a816f8a4d91ba8a05952fd646d8ae88006d4e98ff422" name="objectweb-asm" arch="noarch">
  <version epoch="0" ver="9.7.1" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.5-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 9.6-1" date="1702296000">- Update to upstream version 9.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.6-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.6-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 9.6-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 9.6-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.6-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.7-1" date="1724414400">- Update to upstream version 9.7
- Resolves: rhbz#2271211</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.7.1-1" date="1728302400">- Update to upstream version 9.7.1
- Resolves: rhbz#2316766</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.7.1-2" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="200e524935ef2cb5c4ed5dfa540541998070d4071aaa09d3678cfb17f9fb3ed5" name="objectweb-asm-javadoc" arch="noarch">
  <version epoch="0" ver="9.1" rel="8.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 9.1-6" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 9.1-7" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 9.1-8" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="16ac6489b38370b835fa39e6d4b4eedf33fe4e9bf41ba00b344a66196744a475" name="objectweb-asm-javadoc" arch="noarch">
  <version epoch="0" ver="9.3" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 9.1-1" date="1613736000">- Update to latest upstream release</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 9.1-1" date="1620993600">- Update to upstream version 9.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.1-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.2-1" date="1635854400">- Update to upstream version 9.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.2-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 9.2-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.3-1" date="1652097600">- Update to upstream version 9.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.3-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="58c5b735e9d68f699c7444413de7f4c077e744e8bca248a30fab1caab046ecd6" name="objectweb-asm-javadoc" arch="noarch">
  <version epoch="0" ver="9.7.1" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.5-3" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 9.6-1" date="1702296000">- Update to upstream version 9.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.6-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.6-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 9.6-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 9.6-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.6-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.7-1" date="1724414400">- Update to upstream version 9.7
- Resolves: rhbz#2271211</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.7.1-1" date="1728302400">- Update to upstream version 9.7.1
- Resolves: rhbz#2316766</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 9.7.1-2" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
</package>
<package pkgid="2a340c99ea088c85ab36f820b071ee0b8d4a6df38afcf4299ec5e72153d333cc" name="objenesis" arch="noarch">
  <version epoch="0" ver="3.1" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-8" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-10" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="4e6ac7403cebe1058141e4f4bbf6d2303a82edb3efbda1a5a1a01498dd587a9b" name="objenesis" arch="noarch">
  <version epoch="0" ver="3.4" rel="11.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-7" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-8" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-9" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Chris Kelley &lt;ckelley@redhat.com&gt; - 3.4-1" date="1715083200">- Update to version 3.4
- Resolves: rhbz#2279242</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4-2" date="1718712000">- Remove dependency on junit-bom</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4-4" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c7e9f65a527285aaad252a3ec470bcec80f8316130596304700d5d09bb17cce6" name="objenesis-javadoc" arch="noarch">
  <version epoch="0" ver="3.1" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-8" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-10" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="07bca785e94bcedb87e607851bb78e10f0860a41e5598574fbbe52dc4ee6fa12" name="objenesis-javadoc" arch="noarch">
  <version epoch="0" ver="3.1" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@fedoraproject.org&gt; - 3.1-1" date="1588593600">- bumped  to 3.1
- disabled javadoc generation. It requires maven pomming beyond my skills</changelog>
  <changelog author="Alexander Kurtakov &lt;akurtako@redhat.com&gt; 3.1-2" date="1593086400">- Fix build with Java 11.</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.1-3" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1-7" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.1-8" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3701bd52502bb9d0e3b5cf2e54007d0a7bda651cc7a0698f9aba16ef32820d8d" name="objenesis-javadoc" arch="noarch">
  <version epoch="0" ver="3.4" rel="11.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-6" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3-7" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-8" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3-9" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Chris Kelley &lt;ckelley@redhat.com&gt; - 3.4-1" date="1715083200">- Update to version 3.4
- Resolves: rhbz#2279242</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4-2" date="1718712000">- Remove dependency on junit-bom</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4-4" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="a625472c46a54db950f75a3f812202e81ca761acd02e10004fd0fd8fad9344a5" name="oci-seccomp-bpf-hook-tests" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="1.el9_6"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.9-1" date="1681905600">- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.9
- Related: #2176063</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.10-1" date="1697803200">- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.10
- Related: RHEL-2112</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.10-2" date="1723723200">- rebuild
- Resolves: RHEL-35939</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.10-3" date="1733313600">- rebuild
- Resolves: RHEL-69918</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.11-1" date="1744200000">- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
- simplify spec
- Resolves: RHEL-86603</changelog>
</package>
<package pkgid="578f6eb8862a533a28320c493f73d6f50a2b9d335eade305045e1f7fda1e874f" name="oci-seccomp-bpf-hook-tests" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="2.el9_8"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.10-2" date="1723723200">- rebuild
- Resolves: RHEL-35939</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.10-3" date="1733313600">- rebuild
- Resolves: RHEL-69918</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.11-1" date="1744200000">- update to https://github.com/containers/oci-seccomp-bpf-hook/releases/tag/v1.2.11
- simplify spec
- Resolves: RHEL-86603</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 1.2.11-2" date="1783425600">- rebuild for CVE-2026-33811
  Resolves: RHEL-187325</changelog>
</package>
<package pkgid="7f246a01288a5060e2783ef997dbf0c55566ce1314eceec8b1134c7277a3d1bb" name="ongres-scram-javadoc" arch="noarch">
  <version epoch="0" ver="1.9~beta1" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0~beta.2-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0~beta.2-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.0.0~beta.2-14" date="1626091200">- Added junit dependency</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0~beta.2-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 1.9.0~beta1-1" date="1671624000">- Rebase to 1.9-beta1
- change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"</changelog>
</package>
<package pkgid="e0c105314dd596c8a39d6c55cbdc5039a291ab0ed64cb0167091e4a58a0346de" name="ongres-scram-parent" arch="noarch">
  <version epoch="0" ver="1.9~beta1" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.0~beta.2-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0~beta.2-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.0.0~beta.2-14" date="1626091200">- Added junit dependency</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.0~beta.2-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 1.9.0~beta1-1" date="1671624000">- Rebase to 1.9-beta1
- change of licences of ongres-scram and ongres-scram-javadoc to "BSD and MIT and ASL 2.0"</changelog>
</package>
<package pkgid="870f1ba51753520bce2e3cd58ef31a097be6247eb3a7e5446adacd5612578757" name="open-vm-tools-devel" arch="aarch64">
  <version epoch="0" ver="13.0.10" rel="1.el9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 12.4.0-1" date="1713441600">- Rebase to 12.4.0 [RHEL-30341
- Resolves: RHEL-30341
  ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 12.4.0-2" date="1716206400">- ovt-Require-dbus-tools.patch [RHEL-35543]
- Resolves: RHEL-35543
  ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 12.4.5-1" date="1726142400">- Rebase to 12.4.5 [RHEL-45547]
- Resolves: RHEL-45547
  ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 12.5.0-1" date="1733227200">- Rebase to 12.5.0 [RHEL-63096]
- Resolves: RHEL-63096
  ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)</changelog>
  <changelog author="Lili Du &lt;ldu@redhat.com&gt; - 13.0.0-1" date="1753444800">- Rebase to 13.0.0 [RHEL-99158]
- Resolves: RHEL-99158 
  ([ESXi][RHEL9] open-vm-tools version 13.0.0 has been released - please rebase)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 13.0.0-2" date="1759752000">- ovt-Address-CVE-2025-41244.patch [RHEL-117392]
- Resolves: RHEL-117392
  ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.8])</changelog>
  <changelog author="Lili Du &lt;ldu@redhat.com&gt; - 13.0.5-1" date="1762430400">- Rebase to 13.0.5 [RHEL-118505]
- Resolves: RHEL-118505
  ([ESXi][RHEL9] open-vm-tools version 13.0.5 has been released - please rebase)</changelog>
  <changelog author="Lili Du &lt;ldu@redhat.com&gt; - 13.0.5-1" date="1770897600">- Rebase to 13.0.10 [RHEL-144578]
- Resolves: RHEL-144578
  ([ESXi][RHEL9] open-vm-tools version 13.0.10 has been released - please rebase)</changelog>
</package>
<package pkgid="5a78a0cc7ced3da99a51474be460018f843f40226b75c86e5c43c3e6df7c0a27" name="open-vm-tools-sdmp" arch="aarch64">
  <version epoch="0" ver="13.0.10" rel="1.el9"/>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 12.4.0-1" date="1713441600">- Rebase to 12.4.0 [RHEL-30341
- Resolves: RHEL-30341
  ([ESXi][RHEL9]open-vm-tools version 12.4.0 has been released - please rebase)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 12.4.0-2" date="1716206400">- ovt-Require-dbus-tools.patch [RHEL-35543]
- Resolves: RHEL-35543
  ([ESXi][open-vm-tools]The open-vm-tools should depend on dbus-tools)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 12.4.5-1" date="1726142400">- Rebase to 12.4.5 [RHEL-45547]
- Resolves: RHEL-45547
  ([ESXi][RHEL9] open-vm-tools version 12.4.5 has been released - please rebase)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 12.5.0-1" date="1733227200">- Rebase to 12.5.0 [RHEL-63096]
- Resolves: RHEL-63096
  ([ESXi][RHEL9] open-vm-tools version 12.5.0 has been released - please rebase)</changelog>
  <changelog author="Lili Du &lt;ldu@redhat.com&gt; - 13.0.0-1" date="1753444800">- Rebase to 13.0.0 [RHEL-99158]
- Resolves: RHEL-99158 
  ([ESXi][RHEL9] open-vm-tools version 13.0.0 has been released - please rebase)</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; - 13.0.0-2" date="1759752000">- ovt-Address-CVE-2025-41244.patch [RHEL-117392]
- Resolves: RHEL-117392
  ([CISA Major Incident] CVE-2025-41244 open-vm-tools: Local privilege escalation in open-vm-tools [rhel-9.8])</changelog>
  <changelog author="Lili Du &lt;ldu@redhat.com&gt; - 13.0.5-1" date="1762430400">- Rebase to 13.0.5 [RHEL-118505]
- Resolves: RHEL-118505
  ([ESXi][RHEL9] open-vm-tools version 13.0.5 has been released - please rebase)</changelog>
  <changelog author="Lili Du &lt;ldu@redhat.com&gt; - 13.0.5-1" date="1770897600">- Rebase to 13.0.10 [RHEL-144578]
- Resolves: RHEL-144578
  ([ESXi][RHEL9] open-vm-tools version 13.0.10 has been released - please rebase)</changelog>
</package>
<package pkgid="e9c52956919d0ced3118a59d87aaf5123040b62518f2f69d0894951731bd8a41" name="openal-soft-examples" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19.1-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19.1-8" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fran&#xE7;ois Cami &lt;fcami@fedoraproject.org&gt; - 1.19.1-9" date="1596542400">- Fix FTBFS (rhbz#1865148)
- Set __cmake_in_source_build
- BR qt5-qtbase-devel to keep the GUI frontend</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 1.19.1-10" date="1611144000">- Only build portaudio-backend on Fedora</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.19.1-11" date="1611230400">- Only build fluidsynth support on Fedora</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19.1-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.19.1-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.19.1-14" date="1627905600">- Only build SDL_sound support on Fedora and rhel &lt; 9
- Resolves: rhbz#1989141</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.19.1-15" date="1628078400">- Don't package some examples when SDL_sound is disabled</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.19.1-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ca826c358c2063de39871a10cbf821bded2f5e6a98b6cae1fdd8b9d73af99891" name="openal-soft-qt" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19.1-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19.1-8" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fran&#xE7;ois Cami &lt;fcami@fedoraproject.org&gt; - 1.19.1-9" date="1596542400">- Fix FTBFS (rhbz#1865148)
- Set __cmake_in_source_build
- BR qt5-qtbase-devel to keep the GUI frontend</changelog>
  <changelog author="Hans de Goede &lt;hdegoede@redhat.com&gt; - 1.19.1-10" date="1611144000">- Only build portaudio-backend on Fedora</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.19.1-11" date="1611230400">- Only build fluidsynth support on Fedora</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19.1-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.19.1-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.19.1-14" date="1627905600">- Only build SDL_sound support on Fedora and rhel &lt; 9
- Resolves: rhbz#1989141</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.19.1-15" date="1628078400">- Don't package some examples when SDL_sound is disabled</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.19.1-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3596697912e9cc2e229fcaab7fedfbdffa32a12537536f0e0588d76f2b57d3a5" name="openchange-client" arch="aarch64">
  <version epoch="0" ver="2.3" rel="45.el9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-42" date="1714392000">- Related: RHEL-33645 (Rebuild against samba 4.20)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-43" date="1728043200">- Related: RHEL-59788 (Rebuild against samba 4.21)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-44" date="1749643200">- Related: RHEL-89873 (Rebuild against samba 4.22)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-45" date="1757937600">- Related: RHEL-114548 (Rebuild against samba 4.23)</changelog>
</package>
<package pkgid="2f231c89103229cdaf9f1e75900518e3b66bc5e66b3286f49d9ad23042217201" name="openchange-devel" arch="aarch64">
  <version epoch="0" ver="2.3" rel="45.el9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-42" date="1714392000">- Related: RHEL-33645 (Rebuild against samba 4.20)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-43" date="1728043200">- Related: RHEL-59788 (Rebuild against samba 4.21)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-44" date="1749643200">- Related: RHEL-89873 (Rebuild against samba 4.22)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-45" date="1757937600">- Related: RHEL-114548 (Rebuild against samba 4.23)</changelog>
</package>
<package pkgid="843b145fad5f481968f1ed8dd0c4db71485fed3a44a1115fe74055b06c693324" name="openchange-devel-docs" arch="noarch">
  <version epoch="0" ver="2.3" rel="45.el9"/>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-42" date="1714392000">- Related: RHEL-33645 (Rebuild against samba 4.20)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-43" date="1728043200">- Related: RHEL-59788 (Rebuild against samba 4.21)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-44" date="1749643200">- Related: RHEL-89873 (Rebuild against samba 4.22)</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 2.3-45" date="1757937600">- Related: RHEL-114548 (Rebuild against samba 4.23)</changelog>
</package>
<package pkgid="b88c3f8e6ce8491c83d3dc074c3d5357a12f78990802478962c1878f5312ce7b" name="openjpeg2-devel-docs" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="8.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 2.4.0-8" date="1737633600">- fix two heap buffer overflows CVE-2024-56826 and CVE-2024-52827 (RHEL-72519,RHEL-72521)</changelog>
</package>
<package pkgid="2ea96fe5b72fa6a53141d0e41884e395b0223dd780dcaf7c0dcfea18a10e1ccc" name="openmpi-java-devel" arch="aarch64">
  <version epoch="2" ver="4.1.1" rel="7.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 4.1.1-5" date="1645099200">- Revert v4.1.2
- Add Epoch tag
- Resolves: rhbz#2055184</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1:4.1.1-6" date="1689854400">- Revert v4.1.5
- Bump version
- Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 2:4.1.1-7" date="1689940800">- Increase Epoch tag
- Resolves: rhbz#2159637, rhbz#2218121, rhbz#2216042</changelog>
</package>
<package pkgid="70d3ee73c979e833fd86f467eaa2fbbf6c27bc3e81f198be6f7ac2ba114e6b16" name="openscap-report" arch="noarch">
  <version epoch="0" ver="0.2.9" rel="2.el9"/>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.2.9-1" date="1714046400">- Initial build for RHEL 9</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.2.9-2" date="1715860800">- Add gating.yaml</changelog>
</package>
<package pkgid="d2967f97c6ed82cde684313f0a5d05c94b4b2b71050a9ec2981f3aff1457c5e4" name="opensm-static" arch="aarch64">
  <version epoch="0" ver="3.3.24" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.22-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-1" date="1584360000">- Rebase opensm to latest upstream release 3.3.23
- Resolves: bz1813779</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; -3.3.23-3" date="1603972800">- Update systemd service file</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.23-4" date="1607601600">- opensm service should after rdma-hw.target</changelog>
  <changelog author="Timm B&#xE4;der &lt;tbaeder@redhat.com&gt; 3.3.23.5" date="1607601601">- Use make macros
  https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.23-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.23-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Honggang Li &lt;honli@redhat.com&gt; - 3.3.24-1" date="1623844800">- Rebase opensm to latest upstream release 3.3.24
- Resolves: bz1961963</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.3.24-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="dcc70b01847dbacf8209f812672387467e96d23dd02cbc2f0e06fb00bd64b709" name="openssh-sk-dummy" arch="aarch64">
  <version epoch="0" ver="9.9p1" rel="7.el9_8.alma.1"/>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 8.7p1-45" date="1739880000">- Fix missing error codes set and invalid error code checks in OpenSSH. It
  prevents memory exhaustion attack and a MITM attack when VerifyHostKeyDNS
  is on (CVE-2025-26465).
  Resolves: RHEL-78700</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 8.7p1-46" date="1753099200">- Move the redhat help message to debug1 log level
  Resolves: RHEL-104580</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Koichiro Iwao &lt;meta@almalinux.org&gt; - 9.9p1-7.alma.1" date="1779278400">- Unpatch Red Hat help message</changelog>
</package>
<package pkgid="68329b401db44d2c1a3df64f4cedccc821bc3aefd0d9c495a717cb4672b5884a" name="openssh-sk-dummy" arch="aarch64">
  <version epoch="0" ver="9.9p1" rel="9.el9_8.alma.1"/>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 9.9p1-1" date="1757505600">- Rebase to version 9.9
  Resolves: RHEL-108912</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-2" date="1761566400">- Fix implicit destination path selection when source path ends with ".."
  Resolves: RHEL-119515
- Canonicalize username when matching a user
  Resolves: RHEL-118372</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-3" date="1765281600">- Enable support for DSA keys
  Resolves: RHEL-127624
- CVE-2025-61984: Reject usernames with control characters
  Resolves: RHEL-133959
- CVE-2025-61985: Reject URL-strings with NULL characters
  Resolves: RHEL-133960</changelog>
  <changelog author="Dmitry Belyavskiy &lt;dbelyavs@redhat.com&gt; - 9.9p1-4" date="1772020800">- Provide a way to skip unsupported ML-KEM hybrid algorithms in FIPS mode
  Resolves: RHEL-151580</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-5" date="1773662400">- CVE-2026-3497: Fix information disclosure or denial of service due
  to uninitialized variables in gssapi-keyex
  Resolves: RHEL-155824</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-6" date="1774526400">- Version bump</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-7" date="1776081600">- CVE-2026-35385: Fix privilege escalation via scp legacy protocol
  when not in preserving file mode
  Resolves: RHEL-164753
- CVE-2026-35388: Add connection multiplexing confirmation for proxy-mode
  multiplexing sessions
  Resolves: RHEL-166250
- CVE-2026-35387: Fix incomplete application of PubkeyAcceptedAlgorithms
  and HostbasedAcceptedAlgorithms with regard to ECDSA keys
  Resolves: RHEL-166234
- CVE-2026-35414: Fix mishandling of authorized_keys principals option
  Resolves: RHEL-166202
- CVE-2026-35386: Add validation rules to usernames and hostnames
  set for ProxyJump/-J on the commandline
  Resolves: RHEL-166218</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-8" date="1782820800">- CVE-2026-55653: Fix double free in openssh DH-GEX client path during
  FIPS known-group validation that leads to client-side denial of service
  Resolves: RHEL-186439
- CVE-2026-55654: Fix heap out-of-bounds read during GSSAPI indicator
  cleanup due to missing NULL terminator
  Resolves: RHEL-185836
- CVE-2026-55655: Fix MITM of X11 forwarding via abstract UNIX socket
  pre-binding
  Resolves: RHEL-185854</changelog>
  <changelog author="Zoltan Fridrich &lt;zfridric@redhat.com&gt; - 9.9p1-9" date="1784030400">- CVE-2026-59996: Fix remote glob result of ".." causing files to be placed
  in unintended parent directories when scp performs remote-to-remote copy
  via the local host
  Resolves: RHEL-193178
- CVE-2026-60002: Fix use-after-free in cached hostkey during key re-exchange
  Resolves: RHEL-193024</changelog>
  <changelog author="Koichiro Iwao &lt;meta@almalinux.org&gt; - 9.9p1-9.alma.1" date="1785326400">- Unpatch Red Hat help message</changelog>
</package>
<package pkgid="77277349196dec36e8f1aee438dbdea8b35e2b2b161977215daaee13f2e1102b" name="opentest4j" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="11.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.2.0-4" date="1604664000">- Build with release flag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-8" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-9" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2.0-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-11" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="9113469a837fa5f22a4ccf63931435b89c4f896715dd244703cf122c4f8c5075" name="opentest4j" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="13.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.2.0-13" date="1676462400">- Build with module-info</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-1" date="1692273600">- Update to upstream version 1.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-12" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="27ed074c7ccb0f3f94f8295a0ba0743f0ff6e58c5eaaa2bb691e35621ab81a79" name="opentest4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="11.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.2.0-4" date="1604664000">- Build with release flag</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-8" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-9" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2.0-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-11" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="ec74128ebaf34d799d46072eacd95f22af877b238aad1b3777c1b925597e3575" name="opentest4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="12.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2.0-10" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2.0-11" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2.0-12" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="02aaca72e14c5da8ec48476842e376e3614c35457b81edc8fcad297fcfce74c3" name="opentest4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="13.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.2.0-13" date="1676462400">- Build with module-info</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-14" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-1" date="1692273600">- Update to upstream version 1.3.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-12" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="7c10a34fc34008da292103502c887e82352c4f41b579f6900960167adab803ab" name="orc-doc" arch="noarch">
  <version epoch="0" ver="0.4.31" rel="8.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.4.31-7" date="1722427200">- Add patch for CVE-2024-40897
- Resolves: RHEL-50700</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; 0.4.31-8" date="1722427201">- Bump version for upgrade with z-stream
- Resolves: RHEL-50700</changelog>
</package>
<package pkgid="a08df0185863ebabc806d2cdf19215cb4f04b9e29f3b656b35936e272eec480a" name="osbuild-composer-tests" arch="aarch64">
  <version epoch="0" ver="164" rel="1.el9.alma.1"/>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 147-1" date="1754481600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 149-1" date="1755777600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 155-1" date="1762948800">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 158-1" date="1766577600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 160-1" date="1768996800">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 161-1" date="1770206400">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 162-1" date="1770811200">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 163-1" date="1771329600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 164-1" date="1771848000">- New upstream release</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 164-1.alma.1" date="1776772800">- Add AlmaLinux repositories</changelog>
</package>
<package pkgid="2482e848675b6c1a471b5c43cea78c877d59fe318a40423a488d2555762af3e3" name="osbuild-composer-tests" arch="aarch64">
  <version epoch="0" ver="165.1" rel="4.el9_8.alma.1"/>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 149-1" date="1755777600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 155-1" date="1762948800">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 158-1" date="1766577600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 160-1" date="1768996800">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 161-1" date="1770206400">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 162-1" date="1770811200">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 163-1" date="1771329600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 164-1" date="1771848000">- New upstream release</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 165.1-4" date="1786536000">- Update to 165.1
- go.mod: update osbuild/images to v0.245.1, adding the PQC keys to the
  rhel-9 and rhel-10 rolling distribution repository configs
- go.mod: update osbuild/images to 61b16700, enabling bootupd metadata
  generation for edge-commits including 9.6+ images
- Test repository definitions are left at their upstream values</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 165.1-4.alma.1" date="1786536001">- Add AlmaLinux repositories</changelog>
</package>
<package pkgid="470b4c4413e3cfb1f154d42504c6c464b993103460d58f5d50bf60d2d55c6335" name="osbuild-tools" arch="aarch64">
  <version epoch="0" ver="174" rel="1.el9"/>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 153-1" date="1750420800">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 155-1" date="1752321600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 156-1" date="1752580800">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 158-1" date="1755172800">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 162-1" date="1760011200">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 163-1" date="1761220800">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 164-1" date="1762344000">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 172-1" date="1770379200">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 173-1" date="1770897600">- New upstream release</changelog>
  <changelog author="imagebuilder-bot &lt;imagebuilder-bots+imagebuilder-bot@redhat.com&gt; - 174-1" date="1771502400">- New upstream release</changelog>
</package>
<package pkgid="ea0d925d3573fda7765909aaadd7694400fe7700a9d1127b77401e35e88aa2db" name="osgi-annotation" arch="noarch">
  <version epoch="0" ver="8.0.1" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 8.0.0-1" date="1610712000">- Update to upstream version 8.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.1-1" date="1634126400">- Update to upstream version 8.0.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.1-2" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.1-3" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8.0.1-4" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.1-5" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="eeb21f8f2fc4aa95ef1d981f9a0b2f175648be832576a078cba5c6e8cc511e00" name="osgi-annotation" arch="noarch">
  <version epoch="0" ver="8.1.0" rel="15.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.1-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.1.0-1" date="1692273600">- Update to upstream version 8.1.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.1.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.1.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.1.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 8.1.0-5" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8.1.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.1.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.1.0-12" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.1.0-13" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="d73e0377367d1e5515334aa747a1f8ab6aa7702c315a7efe8b44eaf9c9c80281" name="osgi-annotation-javadoc" arch="noarch">
  <version epoch="0" ver="8.0.0" rel="5.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-3" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.0.0-5" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 8.0.0-1" date="1610712000">- Update to upstream version 8.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.0.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b7a4dea8c89d1437cdfcd44dd0addf54a4019b0a5eaa2fde27d8eb97461ba62b" name="osgi-annotation-javadoc" arch="noarch">
  <version epoch="0" ver="8.0.1" rel="5.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 8.0.0-1" date="1610712000">- Update to upstream version 8.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.1-1" date="1634126400">- Update to upstream version 8.0.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.1-2" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.1-3" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8.0.1-4" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.1-5" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="fa25006f58cfbce9ffafd47b09ea9873cb8708cc2e8dce66ac49e2d09d6ad2f7" name="osgi-annotation-javadoc" arch="noarch">
  <version epoch="0" ver="8.1.0" rel="15.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.1-7" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.1.0-1" date="1692273600">- Update to upstream version 8.1.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.1.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.1.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.1.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 8.1.0-5" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8.1.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.1.0-7" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.1.0-12" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.1.0-13" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="e06defc18f2dfa3fb609ac332920a812be7441f42306002e0b38f06315880039" name="osgi-compendium" arch="noarch">
  <version epoch="0" ver="7.0.0" rel="13.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 7.0.0-7" date="1606305600">- Rebuild to regenerate OSGi metadata</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.0.0-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-13" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="475ba953a2664824e89f7de2d424d665563fc85be2786f52612a9e2f8b7a1cff" name="osgi-compendium" arch="noarch">
  <version epoch="0" ver="7.0.0" rel="34.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-16" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-17" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-18" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.0.0-19" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.0.0-20" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-21" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-31" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-32" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="48be0971b422d344a1048cb86e3e923da73d35bfeece003bc4cd2f77d23e35c8" name="osgi-compendium-javadoc" arch="noarch">
  <version epoch="0" ver="7.0.0" rel="12.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-4" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.0.0-5" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 7.0.0-7" date="1606305600">- Rebuild to regenerate OSGi metadata</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-10" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-11" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7.0.0-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d2bd7d2fb9e6667e42ab8e3cf4153a5f5d3838e221a6fd83423f1d255f42f99e" name="osgi-compendium-javadoc" arch="noarch">
  <version epoch="0" ver="7.0.0" rel="13.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 7.0.0-7" date="1606305600">- Rebuild to regenerate OSGi metadata</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-10" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-11" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.0.0-12" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-13" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="9e142c44005d11c168ad382ac3eff7a2b57da879fdd32e54e6c7d3f05911345e" name="osgi-compendium-javadoc" arch="noarch">
  <version epoch="0" ver="7.0.0" rel="34.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-14" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-15" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-16" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-17" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-18" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.0.0-19" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.0.0-20" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-21" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-31" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-32" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="acee6baadc3ad9e0562319f1c17b56497a20f810541269635e583331873d25d2" name="osgi-core" arch="noarch">
  <version epoch="0" ver="8.0.0" rel="30.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-9" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8.0.0-12" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8.0.0-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-14" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-26" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-27" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="892053108e87b9240459b930a91c476b57b123b429f6d6fb9a769699278e3dc3" name="osgi-core" arch="noarch">
  <version epoch="0" ver="8.0.0" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 8.0.0-1" date="1610712000">- Update to upstream version 8.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8.0.0-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-6" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="8fefe038dfd6a1013f56f5cd00df42de001c4348f2c264cef3db781b83f349a6" name="osgi-core-javadoc" arch="noarch">
  <version epoch="0" ver="8.0.0" rel="30.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-7" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-8" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-9" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8.0.0-12" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8.0.0-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-14" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-26" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-27" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="c7e938c4c996726889ae27422d68acbfe907f351f2c1feacb28fd6f53d622e93" name="osgi-core-javadoc" arch="noarch">
  <version epoch="0" ver="8.0.0" rel="5.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.0.0-4" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.0.0-4" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 8.0.0-1" date="1610712000">- Update to upstream version 8.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.0.0-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3cc0800e394ef040dc9107a0ed7bbdd9d5e936138599a27925b59e061737a7fb" name="osgi-core-javadoc" arch="noarch">
  <version epoch="0" ver="8.0.0" rel="6.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 8.0.0-1" date="1610712000">- Update to upstream version 8.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.0.0-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8.0.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-3" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-4" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 8.0.0-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0.0-6" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5a02829cf6a39674a8bccef9728040899babfdc0376e91db07b8b40fa68c91ca" name="overpass-mono-fonts" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="8.el9"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.0.4-1" date="1574769600">- update to 3.0.4</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.0.4-2" date="1575633600">- fix incorrect fontconfig file (thanks to lazybvr)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.4-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.4-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.4-5" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.4-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 3.0.4-7" date="1621598400">- Resolves:rhbz#1961999 - Add gating tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.0.4-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="388310a6053c6c9ffc7d3d15226c903d10735eff40e04fcc23abac0f4637319a" name="owasp-java-encoder-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.2" rel="6.el9.alma"/>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 1.2.2-6.alma" date="1614600000">- Add junit to BR</changelog>
</package>
<package pkgid="e0c4136c022da72752d27a2fae8023a3c940a492fb6896ff5373ec9b07b70a3e" name="pango-tests" arch="aarch64">
  <version epoch="0" ver="1.48.7" rel="3.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.48.0-1" date="1604923200">- Update to 1.48.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.48.1-1" date="1611316800">- Update to 1.48.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.48.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.48.2-1" date="1613044800">- Update to 1.48.2</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.48.3-1" date="1615550400">- Update to 1.48.3
- Disable gtk-doc support as we don't have gi-docgen in Fedora yet</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.48.4-1" date="1616846400">- Update to 1.48.4</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.48.4-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.48.7-1" date="1626177600">- Update to 1.48.7 (#1981720)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.48.7-2" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 1.48.7-3" date="1667390400">- Update pango-emoji-table.h for emoji 14 support
- Add pango-update-emoji.patch
- Resolves: #2119674</changelog>
</package>
<package pkgid="610dc1cf3f5a3ed38c5c7c9ed6e54d24b2683f618ec1fa5606a81bf028103737" name="pcaudiolib-devel" arch="aarch64">
  <version epoch="0" ver="1.1" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-5" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-7" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0c753089a5e3522f44ff6eec49959b2c484a4086fabd0032106da6decff9c3ab" name="pciutils-devel-static" arch="aarch64">
  <version epoch="0" ver="3.7.0" rel="7.el9"/>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-6" date="1730376000">- add PCIe 6.0 data rate (64 GT/s) support (#RHEL-61959)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 3.7.0-7" date="1730548800">- add support for cxl1.1 device link status information (#RHEL-29162)</changelog>
</package>
<package pkgid="a91b6f711d4e706079a21c68f68404fee1ee9c39552bd56265a4f6f8efd5f86b" name="pcre-doc" arch="noarch">
  <version epoch="0" ver="8.44" rel="4.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 8.44.3-4" date="1713355200">- Fix the SAST reports described in RHEL-32492 and RHEL-32488</changelog>
</package>
<package pkgid="30e5ef112a08d142c061ce34707d5206240ef5607650a88f42ed2a759d3bf6aa" name="pcre-tools" arch="aarch64">
  <version epoch="0" ver="8.44" rel="4.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 8.44.3-4" date="1713355200">- Fix the SAST reports described in RHEL-32492 and RHEL-32488</changelog>
</package>
<package pkgid="1cde891d3911575d8752f72c1fc0d11c88f16730ec8953ac642c779496abf657" name="pcre2-static" arch="aarch64">
  <version epoch="0" ver="10.40" rel="6.el9"/>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-3" date="1697544000">- Fix issue in the backtracking optimization of character in JIT</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-4" date="1699876800">- Fix an issue with restoring originally unset entries in recursion
- Resolves: BZ#2248133</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-5" date="1708084800">- Rebuilt for added pcre2-tools into CRB</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 10.40-6" date="1722427200">- Fix SEGFAULT caused by dereferencing subject when length==0 on aarch64
- Resolves: RHEL-51866</changelog>
</package>
<package pkgid="f466bc36eb064c381d67ef591fae1224cda471090bfc1ab3352dff974d550dd6" name="pcsc-lite-doc" arch="noarch">
  <version epoch="0" ver="1.9.4" rel="2.el9"/>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.9.4-2" date="1729857600">- Backport --disable-polkit option (RHEL-34856)</changelog>
</package>
<package pkgid="44fe98768d27017d7a4f6b311d5438c8403c0fe1c47c5684e4686d568a7b7718" name="pentaho-libxml" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="30.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-22" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.1.3-23" date="1582718400">- Require java-headless, rather than java</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-24" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-25" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-27" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-28" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951271 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-29" date="1624881600">- Resolves: rhbz#1976942 remove build dependency on ant-contrib</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="10051a26919fa26372c1bbc366ce8dc70b00484c78a654213f1022a178708715" name="pentaho-libxml-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="30.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-22" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.1.3-23" date="1582718400">- Require java-headless, rather than java</changelog>
  <changelog author="Caol&#xE1;n McNamara &lt;caolanm@redhat.com&gt; - 1.1.3-24" date="1588680000">- allow rebuild with java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.3-25" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-26" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-27" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-28" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951271 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.3-29" date="1624881600">- Resolves: rhbz#1976942 remove build dependency on ant-contrib</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2013b247570a41aee0df1299318ef121c65caeffb3b30bdd622245ca4df72434" name="pentaho-reporting-flow-engine" arch="noarch">
  <version epoch="1" ver="0.9.4" rel="24.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.4-19" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.9.4-20" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.4-21" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.4-22" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:0.9.4-23" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951270 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:0.9.4-24" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c8ffc5234966ca8537ec3dfd587e65e082e76fe1c4a69c8b50bbbbed9931d8f6" name="pentaho-reporting-flow-engine-javadoc" arch="noarch">
  <version epoch="1" ver="0.9.4" rel="24.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.4-19" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.9.4-20" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.4-21" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.9.4-22" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:0.9.4-23" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
- Related: rhbz#1951270 replace apache-commons-logging with java.util.logging</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:0.9.4-24" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e613c98ade912c94caf2a51f3578f3efe0956bd4e951485dffcf166907cb7b53" name="perl-App-cpanminus-tests" arch="noarch">
  <version epoch="0" ver="1.7044" rel="15.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.7044-15" date="1726747200">- Patch the code to use https instead of http (CVE-2024-45321)
- Resolves: RHEL-56520</changelog>
</package>
<package pkgid="a317b328ce71310ba4f671a3a656ece86eb2a126ff6ab61e47cedf934bac9454" name="perl-CGI-tests" arch="noarch">
  <version epoch="0" ver="4.51" rel="5.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4.49-1" date="1591617600">- 4.49 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4.50-1" date="1592827200">- 4.50 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4.50-2" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4.50-3" date="1593172800">- Perl 5.32 re-rebuild of bootstrapped packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.50-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4.51-1" date="1601985600">- 4.51 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.51-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4.51-3" date="1614600000">- Package tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.51-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.51-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="79c70fb01a825d42649ec19c73465dd6a2ac657de607558f296bbe914cd2c021" name="perl-CPAN-tests" arch="noarch">
  <version epoch="0" ver="2.29" rel="5.el9_6"/>
  <changelog author="Michal Josef &#x160;pa&#x10D;ek &lt;mspacek@redhat.com&gt; - 2.29-3" date="1690891200">- Resolves: rhbz#2218907 - Fix CVE-2023-31484</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.29-4" date="1739448000">- Resolves: RHEL-77187
- Fix permission for creating site directories</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.29-5" date="1741003200">- Resolves: RHEL-77187 - Update man page</changelog>
</package>
<package pkgid="425538c7e8056f113450ac0258e2a2a0a0cd0fa609a34f5328f362339175b09d" name="perl-Class-Accessor-Chained" arch="noarch">
  <version epoch="0" ver="0.01" rel="44.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.01-38" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.01-39" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.01-40" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Charles R. Anderson &lt;cra@alum.wpi.edu&gt; - 0.01-41" date="1607428800">- BR make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.01-42" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.01-43" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.01-44" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5ac717fa8a3c76eb839a16273063c2aa9445a4b98e2a47955d0209f0b0a8e498" name="perl-Class-Inner" arch="noarch">
  <version epoch="0" ver="0.200001" rel="31.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.200001-26" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.200001-27" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.200001-28" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.200001-29" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.200001-30" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.200001-31" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="45fd4310cc515e537e0ae5fadf51f3a932e60a88b84dd2cced9954a0eb1724c4" name="perl-Class-ReturnValue" arch="noarch">
  <version epoch="0" ver="0.55" rel="38.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.55-32" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.55-33" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.55-34" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Charles R. Anderson &lt;cra@alum.wpi.edu&gt; - 0.55-35" date="1607428800">- BR make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.55-36" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.55-37" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.55-38" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a04f6bfecf4ee5c78c05a82a72ce9168c8588019b083da424471a58367f37ee6" name="perl-Compress-Raw-Bzip2-tests" arch="aarch64">
  <version epoch="0" ver="2.101" rel="5.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.095-1" date="1595332800">- 2.095 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.095-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.096-1" date="1596283200">- 2.096 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.100-1" date="1610020800">- 2.100 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.100-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.101-1" date="1613822400">- 2.101 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.101-2" date="1613995200">- Package tests</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.101-3" date="1613995201">- Fix dependencies for ELN</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.101-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.101-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cd37cac8da2fac92bbe025b4f5a1170243a3dd87c276da382e516639aaeeed1f" name="perl-Compress-Raw-Zlib-tests" arch="aarch64">
  <version epoch="0" ver="2.101" rel="5.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.095-1" date="1595332800">- 2.095 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.095-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.096-1" date="1596283200">- 2.096 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.100-1" date="1610020800">- 2.100 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.100-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.101-1" date="1613822400">- 2.101 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.101-2" date="1613995200">- Package tests</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.101-3" date="1613995201">- Fix dependencies for ELN</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.101-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.101-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ed93b94b923e3f38fa42bb8c13ae00573c5bd806cecff8deaec3983aa42dcebe" name="perl-Config-IniFiles" arch="noarch">
  <version epoch="0" ver="3.000003" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.000002-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 3.000002-5" date="1584619200">- Build-require blib for the tests</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 3.000003-1" date="1585137600">- update to 3.000003</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.000003-2" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.000003-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.000003-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.000003-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.000003-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8d3e98b510c9dfede662386c9071f7002746e4cbe049f152461dcd1c19c18576" name="perl-Convert-ASN1-tests" arch="noarch">
  <version epoch="0" ver="0.27" rel="24.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.27-16" date="1566993600">- Modernize spec file
- Package upstream tests</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.27-17" date="1572436800">- Quote a substituted number of processors in the test script</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27-18" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.27-19" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27-20" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.27-21" date="1606132800">- Fix unsafe decoding in indef case (CVE-2013-7488)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.27-22" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.27-23" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.27-24" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2085fb1e630f11aea9396f8fb7ed134114af8db37c47ce6d2fd2c9c21b9af23c" name="perl-Convert-Base64" arch="noarch">
  <version epoch="0" ver="0.001" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.001-11" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.001-12" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.001-13" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.001-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.001-15" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.001-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="53bbe8753f921b66bb2f039f34c7ba42276b4307046bc99969825d0d6fb69638" name="perl-Crypt-OpenSSL-Guess" arch="noarch">
  <version epoch="0" ver="0.12" rel="4.el9_4"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.11-8" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11-10" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.12-1" date="1615204800">- 0.12 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.12-2" date="1615291200">- Package tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a4ff8eb4499cb70e7c8d076160813413616232cf553a2dd0c5b430534da3285d" name="perl-Crypt-OpenSSL-Guess-tests" arch="noarch">
  <version epoch="0" ver="0.12" rel="4.el9_4"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11-7" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.11-8" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11-10" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.12-1" date="1615204800">- 0.12 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.12-2" date="1615291200">- Package tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="bc80506af57d00bd4fc001c1ab56f9174c35c0eda855e4c619c32a78fd3c98ac" name="perl-Crypt-PasswdMD5" arch="noarch">
  <version epoch="0" ver="1.4.1" rel="1.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.4.0-15" date="1559217600">- Perl 5.30 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-16" date="1564142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.0-17" date="1571400000">- Spec tidy-up
  - Use author-independent source URL
  - Specify all build dependencies
  - Simplify Digest::MD5 versioned dependency generation using a patch
  - Simplify find command using -delete
  - Fix permissions verbosely
  - Make %files list more explicit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-18" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.4.0-19" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-20" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.0-21" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.4.1-1" date="1612180800">- Update to 1.41
  - Adopt new repo structure - see:
    http://savage.net.au/Ron/html/My.Workflow.for.Building.Distros.html
  - Reformat Makefile.PL
  - Add t/00.*
  - Update POD to change RT to GitHub
- Package new LICENSE file</changelog>
</package>
<package pkgid="33277a95525164a0dc8bf3ead6bb7ee0cfaad4a4a6c5e8060c307dfaedb01946" name="perl-DBD-MariaDB-tests" arch="aarch64">
  <version epoch="0" ver="1.21" rel="17.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.21-17" date="1743595200">- Resolves: RHEL-85011</changelog>
</package>
<package pkgid="54541088884298ee94413ece7740e7d211263df7cbee4d32478dbef4d84f1446" name="perl-Data-ICal" arch="noarch">
  <version epoch="0" ver="0.24" rel="7.el9"/>
  <changelog author="Ralf Cors&#xE9;pius &lt;corsepiu@fedoraproject.org&gt; - 0.23-1" date="1565956800">- Upstream update to 0.23.
- Reflect Source0-URL having changed.</changelog>
  <changelog author="Ralf Cors&#xE9;pius &lt;corsepiu@fedoraproject.org&gt; - 0.24-1" date="1578398400">- Upstream update to 0.24.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.24-2" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.24-3" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.24-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.24-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.24-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.24-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d7ad70ea1d9108ece645029afa3bf9528736db5750efdc55ccaaa94dbb38046d" name="perl-Data-ICal-TimeZone" arch="noarch">
  <version epoch="0" ver="1.23" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-11" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.23-12" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-13" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.23-15" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.23-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5c0a7d14a0101e0d1efdde3ec0ad847bb71be241263e72d4109980d3a16e39d2" name="perl-DateTime-Event-ICal" arch="noarch">
  <version epoch="0" ver="0.13" rel="18.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13-13" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.13-14" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13-15" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13-16" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.13-17" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.13-18" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fc9f23bd9987d1001bbe713a42518177bedacbd1d8c00921c68eefdc5c7d96b0" name="perl-DateTime-Event-Recurrence" arch="noarch">
  <version epoch="0" ver="0.19" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-10" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.19-11" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-12" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-13" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.19-14" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.19-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e446af82c5beefa5c1912bb9309f36909cf42312f21a37c7776db5fe97c343eb" name="perl-DateTime-Format-ICal" arch="noarch">
  <version epoch="0" ver="0.09" rel="37.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.09-32" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.09-33" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.09-34" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.09-35" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.09-36" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.09-37" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="86e93f16e3b19463958b255915a53b2f6992ffc406de42c52e9b61ff2c235c5c" name="perl-DateTime-Format-ISO8601-tests" arch="noarch">
  <version epoch="0" ver="0.16" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.08-23" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.08-24" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.08-25" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.14-1" date="1597752000">- 0.14 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.15-1" date="1603713600">- 0.15 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.16-1" date="1613390400">- 0.16 bump
- Package tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.16-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8511a7288fabab769f5bbd9af87ac6ec344097559ffdeea0f4cf2998b6c8612a" name="perl-DateTime-Set" arch="noarch">
  <version epoch="0" ver="0.3900" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3900-11" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.3900-12" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3900-13" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3900-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3900-15" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3900-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="65d87fba65b7204652d249262a7563a82acc2e96cef5c299b7e99e0ea5370016" name="perl-DateTime-TimeZone-tests" arch="noarch">
  <version epoch="0" ver="2.62" rel="1.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.60-1" date="1702468800">- 2.60 bump (2023c Olson database)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.62-1" date="1707134400">- 2.62 bump (2024a Olson database)</changelog>
</package>
<package pkgid="399fadc0c436df52fc42f420781ac39605ec47a1e580805dc5d2c68aa7156849" name="perl-Devel-CheckLib-tests" arch="noarch">
  <version epoch="0" ver="1.14" rel="9.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.14-9" date="1687348800">- Add test BR gcc and perl(blib) to not skip the tests
- Package tests
- Resolves: rhbz#2216280</changelog>
</package>
<package pkgid="92b90b6258d6d711547948438cebfde78cfaec98986fb98e4760097ffebc525d" name="perl-Encode-IMAPUTF7" arch="noarch">
  <version epoch="0" ver="1.05" rel="17.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.05-12" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.05-13" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.05-14" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.05-15" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.05-16" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.05-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="82373890104ce154a4610e8c8f63c6c0fd2b33b997e4d20abeba731902d21cd4" name="perl-ExtUtils-CBuilder-tests" arch="noarch">
  <version epoch="1" ver="0.280236" rel="5.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1:0.280236-5" date="1764331200">- Resolves: RHEL-131157 - Update tests for Image Mode</changelog>
</package>
<package pkgid="93bd78787451ddd54a04f213b6dc9be6d40e470f58409f067bad30ad09cc281e" name="perl-ExtUtils-MakeMaker-tests" arch="noarch">
  <version epoch="2" ver="7.60" rel="3.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2:7.48-1" date="1601985600">- 7.48 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2:7.50-1" date="1603368000">- 7.50 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2:7.52-1" date="1604577600">- 7.52 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2:7.54-1" date="1605268800">- 7.54 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2:7.56-1" date="1605873600">- 7.56 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2:7.58-1" date="1608638400">- 7.58 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:7.58-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2:7.60-1" date="1613736000">- 7.60 bump
- Package tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:7.60-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:7.60-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="555e4d14305ca274cccd4f22ada0ee86528b484971ad07a57cc1db5b57050b92" name="perl-ExtUtils-PkgConfig" arch="noarch">
  <version epoch="0" ver="1.16" rel="16.el9"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-10" date="1569758400">- Spec tidy-up
  - Use author-independent source URL
  - Classify builds by usage
  - Drop redundant buildroot cleaning in %install section
  - Don't need to delete empty directories from the buildroot
  - Make %files list more explicit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-11" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.16-12" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-13" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.16-15" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.16-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2a944e80e094e83faac28f75105c013481d61cf5f94a3e46e48a8b30bea1cfed" name="perl-FCGI-tests" arch="noarch">
  <version epoch="1" ver="0.79" rel="8.1.el9_6"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1:0.79-8.1" date="1748520000">- Fix CVE-2025-40907 (integer overflow when parsing FastCGI parameters)</changelog>
</package>
<package pkgid="8cdcef4eb6c4ecec02c144b3291d05a559d262b71b060329e90c830ffb5b9176" name="perl-File-Find-Object-Rule" arch="noarch">
  <version epoch="0" ver="0.0312" rel="7.el9"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0311-1" date="1566820800">- Update to 0.0311
  - Moved the VCS repo to https://github.com/shlomif/perl-file-find-object-rule</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0312-1" date="1580212800">- Update to 0.0312
  - Rebuild for order of 'NAME' and 'VERSION' sections in the generated POD
    documentation (VERSION used to appear before NAME)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0312-2" date="1583841600">- BR: perl(blib) for t/00-compile.t and t/findorule.t</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.0312-3" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0312-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0312-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0312-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0312-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a93d8d4b9c339ab62cb0958f00871cde3c1ac7e61d4f6122481bd5e2a955c74f" name="perl-File-Find-Rule-tests" arch="noarch">
  <version epoch="0" ver="0.34" rel="19.1.el9_6"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.34-19.1" date="1749211200">- Use 3 arg open in grep() (CVE-2011-10007)
- Package tests</changelog>
</package>
<package pkgid="98747e13302fda9a40e35e8e0e0764fbbb51667658d9ee10cc603d0d20bc87b5" name="perl-File-LibMagic" arch="aarch64">
  <version epoch="0" ver="1.23" rel="4.el9"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.16-9" date="1567080000">- Explicitly BR: gcc on EL-8 because ExtUtils::CBuilder is missing dependency
  on it (#1547165)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-10" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.22-1" date="1587902400">- Update to 1.22
  - Removed embedded copy of Config::AutoConf from distro.; instead, this is
    now a configure phase prereq. (GH#19)
  - Moved list of constants in libmagic that we care about to one module (GH#20)
  - Add support for setting libmagic processing limits (GH#15, GH#22)
  - Add two class methods that provide introspection on the available limit
    processing parameters, max_param_constant() and limit_key_is_supported()
    (GH#24)
  - Check all libmagic function return values properly and croak on failure
    (GH#21)
  - Switched to using GitHub issues
- Package CONTRIBUTING.md</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.22-2" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.22-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.23-1" date="1598702400">- Update to 1.23
  - Fixed a bug with the Makefile.PL that caused every call to "make" to
    recompile the object file for the package's XS code (GH#28)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.23-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.23-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.23-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="55f6fe9c8570129b2c28c3f4952ab6730f3b89db720818d4ace286beed850a7a" name="perl-File-MMagic" arch="noarch">
  <version epoch="0" ver="1.30" rel="25.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30-20" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.30-21" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30-22" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.30-23" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.30-24" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.30-25" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e62951d6f9659bb697f62699e2f3581b0aa10a3ecf753014b4587d0a2e920dd3" name="perl-File-UserDirs" arch="noarch">
  <version epoch="0" ver="0.08" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.08-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.08-8" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.08-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.08-10" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.08-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.08-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4952e674e00ab0eb05e423623aedfe848b33f1c445c289624dbc2c8b0d5b0f34" name="perl-HTML-Parser-tests" arch="aarch64">
  <version epoch="0" ver="3.76" rel="3.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.72-22" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.72-23" date="1593172800">- Perl 5.32 re-rebuild of bootstrapped packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.72-24" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.73-1" date="1598443200">- 3.73 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.75-1" date="1598875200">- 3.75 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 3.75-2" date="1599739200">- Always build-require HTTP::Headers</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.75-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.76-1" date="1614945600">- 3.76 bump
- Package tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.76-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.76-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="36d32960ed3b11088a3f1500422f3c7de3d29129f4ac4206ceb1462628ad06b6" name="perl-HTTP-Message-tests" arch="noarch">
  <version epoch="0" ver="6.29" rel="3.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 6.25-2" date="1593432000">- Perl 5.32 re-rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 6.25-3" date="1593432001">- Perl 5.32 re-rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.25-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.26-1" date="1599739200">- 6.26 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.27-1" date="1609848000">- 6.27 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.27-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.28-1" date="1613995200">- 6.28 bump
- Package tests</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.29-1" date="1615204800">- 6.29 bump</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.29-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.29-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7e78fc1059438cc93c1a193f4f0e447d2d4a699eecb4e14609c63de04639fded" name="perl-HTTP-Tiny-tests" arch="noarch">
  <version epoch="0" ver="0.076" rel="462.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.076-461" date="1691150400">- Changes the verify_SSL default parameter from 0 to 1 - CVE-2023-31486
- Resolves: rhbz#2228412</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.076-462" date="1705406400">- Update man page for CVE-2023-31486</changelog>
</package>
<package pkgid="0f107bf9ab3b09ceca022b67cf443cd2332860eaea4a57a65ea38b6120dd207b" name="perl-IO-Compress-tests" arch="noarch">
  <version epoch="0" ver="2.102" rel="4.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.095-1" date="1595332800">- 2.095 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.095-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.096-1" date="1596283200">- 2.096 bump</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.100-1" date="1610020800">- 2.100 bump
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.100-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.101-1" date="1613822400">- 2.101 bump</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.102-1" date="1614513600">- 2.102 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.102-2" date="1614600000">- Package tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.102-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.102-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6be4431ff33f94f88993dea8a8ba4a09d8db4904505b15b6ba20372f4fd2eb53" name="perl-IO-Compress-tests" arch="noarch">
  <version epoch="0" ver="2.102" rel="4.el9_8.1"/>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 2.102-4.1" date="1780488000">- Fix CVE-2026-48962: remove use of eval in File::GlobMapper
- Resolves: RHEL-180418</changelog>
</package>
<package pkgid="7ac3b1f85f8d5019eb9d7117f58fbb4f748ea3e74e3418c5d326f34de6f42c22" name="perl-JSON-XS-tests" arch="noarch">
  <version epoch="1" ver="4.04" rel="1.el9_6"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1:4.04-1" date="1757937600">- Update to 4.04
- Fix CVE-2025-40928</changelog>
</package>
<package pkgid="c65df6e281153b1e84f4cdf8b12da3ae06ebf67f071f56bf16bac9d283bdaf9d" name="perl-JSON-tests" arch="noarch">
  <version epoch="0" ver="4.03" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.02-4" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.02-5" date="1584014400">- Specify all dependencies</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4.02-6" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.02-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Emmanuel Seyman &lt;emmanuel@seyman.fr&gt; - 4.03-1" date="1611489600">- Update to 4.03
- Use %{make_install} instead of "make pure_install"
- Use %{make_build} instead of make
- Replace calls to %{__perl} with /usr/bin/perl
- Pass NO_PACKLIST and NO_PERLLOCAL to Makefile.PL</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.03-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 4.03-3" date="1613995200">- Package tests manually</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.03-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.03-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="20c3fa4cae6fa55209216eacb40aa76fcd1f3bb72436013dd73bd14cec15ee80" name="perl-LDAP-tests" arch="noarch">
  <version epoch="1" ver="0.68" rel="5.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1:0.66-5" date="1566820800">- Package tests</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1:0.66-6" date="1572350400">- Fix tests subpackage test script
- Fix a shell bang in a certificate generator script</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.66-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1:0.66-8" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.66-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1:0.68-1" date="1609848000">- 0.68 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.68-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1:0.68-3" date="1613476800">- Fix resolving localhost on loopback-only machines
  (https://github.com/perl-ldap/perl-ldap/pull/60)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:0.68-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:0.68-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="07bd57a320749e87ea324afa1bfe8de1a2d914896170d50ad904fb54a9514d88" name="perl-List-Pairwise" arch="noarch">
  <version epoch="0" ver="1.03" rel="22.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.03-16" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.03-17" date="1583236800">- Unbundle Module::Install</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.03-18" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.03-19" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.03-20" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.03-21" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.03-22" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4f9ede4fef052164b413ce5a672a77a514e8f85e5d7f119681847f930bb338f8" name="perl-Locale-Codes" arch="noarch">
  <version epoch="0" ver="3.67" rel="3.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.63-1" date="1583323200">- 3.63 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 3.64-1" date="1591185600">- 3.64 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.64-2" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.64-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 3.65-1" date="1599048000">- 3.65 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.66-1" date="1606824000">- 3.66 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.66-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 3.67-1" date="1614686400">- 3.67 bump</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.67-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.67-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3a31bfb55f2501bfd117ba361c87bae279713af68adc31a71a8dcba8aff6f0a9" name="perl-Locale-Codes-tests" arch="noarch">
  <version epoch="0" ver="3.67" rel="3.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.63-1" date="1583323200">- 3.63 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 3.64-1" date="1591185600">- 3.64 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.64-2" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.64-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 3.65-1" date="1599048000">- 3.65 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.66-1" date="1606824000">- 3.66 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.66-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 3.67-1" date="1614686400">- 3.67 bump</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.67-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.67-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="700cb356f65d8419bac08c56cb57edbd195654060142ec4d1de2b278ec64ade5" name="perl-Mail-IMAPTalk" arch="noarch">
  <version epoch="0" ver="4.04" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.04-11" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4.04-12" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.04-13" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.04-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.04-15" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.04-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7d55ca23178dac979e957a941e3b9945b1a332c895ee2fb2965b466c9da9962c" name="perl-Mail-JMAPTalk" arch="noarch">
  <version epoch="0" ver="0.15" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13-4" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.14-1" date="1590408000">- 0.14 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.15-1" date="1590494400">- 0.15 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.15-2" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.15-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.15-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8cb8ead361fbc893d6cc169865312a629272c37e4f02da1bdc9dbac17832397b" name="perl-Math-Int64" arch="aarch64">
  <version epoch="0" ver="0.54" rel="19.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.54-13" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.54-14" date="1582027200">- Modernize spec file</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.54-15" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.54-16" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.54-17" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.54-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.54-19" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6f90341627cc9b0d0a5c1ec21d5cfba1f4d4d99e71077ed6a28309a0188ea8ce" name="perl-Module-CoreList-tests" arch="noarch">
  <version epoch="1" ver="5.20240609" rel="1.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1:5.20240609" date="1732017600">- Resolves: RHEL-5539 - 5.20240609 bump</changelog>
</package>
<package pkgid="54896e43bb5b0bb5f8ae2a05381504a5b283df7ae3276a824101a12bf525f516" name="perl-Module-Install-GithubMeta" arch="noarch">
  <version epoch="0" ver="0.30" rel="20.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-15" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.30-16" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-17" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-18" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.30-19" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.30-20" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="69cee157066c4a8142f14517d4d4184318889d0c13b45f2fd5fbbd9cd14073ec" name="perl-Module-ScanDeps-tests" arch="noarch">
  <version epoch="0" ver="1.30" rel="6.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.30-6" date="1732276800">- Resolves: RHEL-68282
- Fix CVE-2024-10224
- Package tests</changelog>
</package>
<package pkgid="c3d83880991194f5dc6dda0759b9841c16bebeeaeb3e0c2f4d88a2cc7bb63d8a" name="perl-Module-Signature-tests" arch="noarch">
  <version epoch="0" ver="0.88" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.83-6" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.83-7" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.86-1" date="1593086400">- Update to 0.86
  - Update PAUSE and ANDK keys to 2020
  - Update documentation pertaining to SHA1
  - Fix compatibility with Crypt::OpenPGP
- Use mktemp to create temporary GPG directory</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.86-2" date="1593259200">- Perl 5.32 re-rebuild updated packages</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.87-1" date="1593864000">- Update to 0.87
  - Skip 3-verify.t on Crypt::OpenPGP installations</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.87-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.87-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.87-4" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.87-5" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.88-1" date="1639828800">- Update to 0.88
  - Update PAUSE keys to 2022</changelog>
</package>
<package pkgid="2b7b4809f546ac29ca888c6938f1463e8d19873dc69ae8db096e58bc9d4db84f" name="perl-Moo" arch="noarch">
  <version epoch="0" ver="2.004004" rel="4.el9"/>
  <changelog author="Emmanuel Seyman &lt;emmanuel@seyman.fr&gt; - 2.003006-1" date="1572177600">- Update to 2.003006
- Replace calls to %{__perl} with /usr/bin/perl
- Replace calls to "make pure_install" with %{make_install}
- Replace calls to make with %{make_build}
- Pass NO_PERLLOCAL=1 to Makefile.PL</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.003006-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Emmanuel Seyman &lt;emmanuel@seyman.fr&gt; - 2.004000-1" date="1586692800">- Update to 2.004000</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.004000-2" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.004000-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Emmanuel Seyman &lt;emmanuel@seyman.fr&gt; - 2.004003-1" date="1606046400">- Update to 2.004003</changelog>
  <changelog author="Emmanuel Seyman &lt;emmanuel@seyman.fr&gt; - 2.004004-1" date="1606651200">- Update to 2.004004</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.004004-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.004004-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.004004-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7726947576b1e61469056158b44d1f9b50a525d9768d11912f5dba070ed40935" name="perl-NNTPClient" arch="noarch">
  <version epoch="0" ver="0.37" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.37-11" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.37-12" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.37-13" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.37-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.37-15" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.37-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3426134fe1d2afa165eb2248fe14045eff89d79387adccf0a7645e800cc8a279" name="perl-Net-CalDAVTalk" arch="noarch">
  <version epoch="0" ver="0.12" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12-8" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.12-9" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.12-11" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.12-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f0dd0cddab05587b846c3f7768a4d1524323abb606ebb9df5d173673e4bb9395" name="perl-Net-CardDAVTalk" arch="noarch">
  <version epoch="0" ver="0.09" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.09-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.09-8" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.09-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.09-10" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.09-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.09-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="505e7d32e75c6752a0bc3737eaca8fb27930d17105e152f9c9552d28edb4296a" name="perl-Net-DAVTalk" arch="noarch">
  <version epoch="0" ver="0.19" rel="6.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.17-1" date="1573473600">- 0.17 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.18-1" date="1586260800">- 0.18 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.19-1" date="1588766400">- 0.19 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.19-2" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.19-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.19-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="51655d3a300414ebf8cb98d8e60f3d8e41e3100f6b3d482e07639a1bc7c31b9f" name="perl-Net-DNS-SEC" arch="aarch64">
  <version epoch="0" ver="1.19" rel="2.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.12-6" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Wes Hardaker &lt;wjhnns174@hardakers.net&gt; - 1.17-1" date="1594814400">- version bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.17-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Wes Hardaker &lt;wjhnns174@hardakers.net&gt; - 1.18-1" date="1602676800">- version bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.18-3" date="1621771200">- Perl 5.34 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-4" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 1.18-5" date="1631620800">- Rebuilt with OpenSSL 3.0.0</changelog>
  <changelog author="Wes Hardaker &lt;wjhnns174@hardakers.net&gt; - 1.19-1" date="1634558400">- version bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.19-2" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
</package>
<package pkgid="16a6442e9d5203d84e7dc7828c938b35e72dc427d942ab307ca7bee6e3f536d5" name="perl-Net-HTTP-tests" arch="noarch">
  <version epoch="0" ver="6.21" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.19-4" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 6.19-5" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.19-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.20-1" date="1610366400">- 6.20 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.20-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.21-1" date="1616155200">- 6.21 bump
- Package tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.21-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.21-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="589a44e78d63cc0b2ad03cdec37708cb4f20cf84f636240ebcd4436b0b49fba2" name="perl-Net-LDAP-Server" arch="noarch">
  <version epoch="0" ver="0.43" rel="17.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.43-12" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.43-13" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.43-14" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.43-15" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.43-16" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.43-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f962a8589be355f1b8833066c99738564c2833ce929db2a684b6a7dfb49e609d" name="perl-Net-LibIDN2" arch="aarch64">
  <version epoch="0" ver="1.01" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.00-9" date="1564142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.01-1" date="1573473600">- 1.01 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.01-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.01-3" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.01-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.01-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.01-6" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.01-7" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
</package>
<package pkgid="a56d8d90e5e9922f7ec99665d7202c960842aa78c14de1820bce39ab71e3b1dc" name="perl-Net-SSLeay-tests" arch="aarch64">
  <version epoch="0" ver="1.94" rel="3.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.94-1" date="1718625600">- Resolves: RHEL-40758
- Update to 1.94
  - Net::SSLeay now officially supports all stable releases of OpenSSL 3.1 and
    3.2, and LibreSSL 3.5-3.8
  - Many noisy compiler warnings have been silenced - if SSLeay.xs fails to
    compile, it should now be much easier to identify the cause
  - libcrypto's OPENSSL_init_crypto() function and libssl's OPENSSL_init_ssl()
    function are now exposed, enabling fine-grained control over the
    initialisation and configuration of both libraries
  - libssl functions implementing TLS 1.3 PSK authentication are now exposed,
    in particular SSL_CTX_set_psk_find_session_callback() (on the server side)
    and SSL_CTX_set_psk_use_session_callback() (on the client side)
  - libssl functions implementing server-side TLS 1.2 PSK authentication are
    now exposed, in particular SSL_CTX_set_psk_server_callback()
  - libssl's SSL_CTX_set_client_hello_cb() function is now exposed, allowing a
    TLS server to set a callback function that is executed when the server
    processes a ClientHello message
  - Many more libcrypto/libssl constants and functions are now exposed; see the
    release notes for the 1.93 developer releases for a full list
- Package tests</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.94-2" date="1747915200">- Fix test suite to work with OpenSSL 3.4.0 and newer
  Resolves: RHEL-92846</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.94-3" date="1748260800">- Resolves: RHEL-92846 - Fix typo in macro</changelog>
</package>
<package pkgid="cde74397c0c66992f4bf6ae2da550adc540ee2b94a3c8b89f0ff3728c211992c" name="perl-Object-HashBase-tools" arch="noarch">
  <version epoch="0" ver="0.009" rel="7.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; 0.008-1" date="1574164800">- Specfile autogenerated by cpanspec 1.78.</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.009-1" date="1579521600">- 0.009 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.009-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.009-3" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.009-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.009-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.009-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.009-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="87d43d41f2b2b8ca60e8140b4bbbde300cc81dc33fc5f03a813ffbc5e01bf44d" name="perl-Parallel-ForkManager" arch="noarch">
  <version epoch="0" ver="2.02" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.02-5" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.02-6" date="1584532800">- Add perl(blib) for tests</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.02-7" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.02-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.02-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.02-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.02-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="32e17d9c6ba5d1e518c673ee55b4d7a3d62a77a6809237742d1cc5cbdb4cbc2e" name="perl-Scalar-List-Utils-tests" arch="noarch">
  <version epoch="4" ver="1.56" rel="462.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:1.56-462" date="1710936000">- Fix implied indenting in XS
- Resolves: RHEL-28962</changelog>
</package>
<package pkgid="60fdbbfad0d3506a45f065a565fa99670fb8df0dfc4f105a34a867e842f4923a" name="perl-Set-Infinite" arch="noarch">
  <version epoch="0" ver="0.65" rel="33.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.65-28" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.65-29" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.65-30" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.65-31" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.65-32" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.65-33" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a613401a27fbbce188ce279bd6cb8b9580ea3bb50389d5040d9e209960ab972e" name="perl-String-CRC32" arch="aarch64">
  <version epoch="0" ver="2.100" rel="3.el9"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.8-1" date="1572609600">- Update to 1.8
  - Perldoc tweaks (GH#3)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.8-3" date="1580990400">- Spec file cleanups: Use make_build and make_install macros, use NO_PACKLIST=1
  - https://docs.fedoraproject.org/en-US/packaging-guidelines/#_parallel_make
  - https://fedoraproject.org/wiki/Perl/Tips#ExtUtils::MakeMaker</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.8-4" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2-1" date="1604923200">- Update to 2
  - Switch to XSLoader rather than DynaLoader (GH#5)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.100-1" date="1612440000">- Update to 2.100
  - Declare vars with our instead of use vars (GH#7)
  - Quote $VERSION to preserve formatting (GH#6)
- Use %license unconditionally</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.100-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.100-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6e1c35eb7acfd2ef937b2997038ccd4ad928d9a47af59186f808389ffaad92bf" name="perl-Sub-Quote" arch="noarch">
  <version epoch="0" ver="2.006006" rel="7.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.006006-1" date="1570017600">- 2.006006 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.006006-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.006006-3" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.006006-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.006006-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.006006-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.006006-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5538eb8c4df028f43cb254efd6f6ad8e730903a1f9b38cf1b15348e39d07836d" name="perl-Test-Inter" arch="noarch">
  <version epoch="0" ver="1.09" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.09-4" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.09-5" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.09-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.09-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.09-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.09-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="583757bc46018b2c7a579336057370d2890a93e17e59f779f0f240b1532c7108" name="perl-Test-Needs" arch="noarch">
  <version epoch="0" ver="0.002009" rel="2.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.002006-3" date="1564142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.002006-4" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.002006-5" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.002006-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.002006-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.002006-8" date="1621598400">- Perl 5.34 rebuild</changelog>
  <changelog author="Emmanuel Seyman &lt;emmanuel@seyman.fr&gt; - 0.002009-1" date="1622980800">- Update to 0.002009
- Use %{make_install} instead of "make pure_install"
- Use %{make_build} instead of make
- Replace %{__perl} with /usr/bin/perl
- Pass NO_PERLLOCAL to Makefile.PL</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.002009-2" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
</package>
<package pkgid="2308cd4dc1799c693837c3cba93031a75bc4c7500640e4afa93dc4b32ae4940f" name="perl-Test-Specio" arch="noarch">
  <version epoch="0" ver="0.47" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.45-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.45-3" date="1582027200">- Correct a perl-Specio license to "Artistic 2.0 and (GPL+ or Artistic)"</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.46-1" date="1584187200">- Update to 0.46
  - Correct license of Specio::PartialDump (GH#17)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.46-2" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.46-3" date="1593172800">- Perl 5.32 re-rebuild of bootstrapped packages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.46-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.46-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.47-1" date="1612094400">- Update to 0.47
  - Change Specio constraint object's stringification overloading to return the
    type name rather than the default Perl object stringification, which gives
    you something like
    "Specio::Constraint::Parameterized=HASH(0x564d258efb48)"; anonymous are
    special cased to return something you can print
  - All types now overload the 'eq' comparison operator: Moose expects types to
    be comparable in this manner when doing role summation (GH#18)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.47-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.47-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="36912c055407d9c8dd7f0495e23f63554a3282d721b8e6521173f88a39236181" name="perl-Test-TrailingSpace" arch="noarch">
  <version epoch="0" ver="0.0600" rel="6.el9"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0302-3" date="1583841600">- BR: perl(blib) for t/00-compile.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0400-1" date="1589976000">- Update to 0.0400
  - Add the 'find_cr' and 'find_tabs' options
- Module now requires Perl 5.14</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0500-1" date="1591358400">- Update to 0.0500
  - Convert the file processing to use a code generated callback (a speed
    optimization)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0501-1" date="1591531200">- Update to 0.0501
  - Try to fix t/dogfood.t tests failures on MS Windows</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.0600-1" date="1591531201">- Update to 0.0600
  - Avoid excessive callback calls by having the _path_cb take the $rule
    object (optimization)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.0600-2" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0600-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0600-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0600-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0600-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2e4050cd903989ebc5b09a8c36eeba5b77607f01a8f70cdc706147e16d7ebfd6" name="perl-Test-Unit" arch="noarch">
  <version epoch="0" ver="0.25" rel="42.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.25-35" date="1567684800">- Adapt tests to changed Perl 5.30 (bug #1749253)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.25-36" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.25-37" date="1584446400">- Specify all dependencies</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.25-38" date="1593086400">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.25-39" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.25-40" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.25-41" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.25-42" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="391bcafabc93a65785e3e151c3e16ca93f11d6fa81dc65623533d5ddfb88611d" name="perl-Test-XML" arch="noarch">
  <version epoch="0" ver="0.08" rel="22.el9"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.08-16" date="1567425600">- Spec tidy-up
  - Use author-independent source URL
  - Drop redundant buildroot cleaning in %install section
  - Specify more build dependencies
  - Simplify find command using -delete
  - Fix typo in %description</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.08-17" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.08-18" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.08-19" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.08-20" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.08-21" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.08-22" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f3182fc6a01797165c9e4b91a0bf121b4e95c24b7dec040d6667c5950b48f8f2" name="perl-Text-LevenshteinXS" arch="aarch64">
  <version epoch="0" ver="0.03" rel="43.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.03-38" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.03-39" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.03-40" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.03-41" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.03-42" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.03-43" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2df5c108cc73eac3a2fa3b69e3ec090370871ed481a0859a21065c66a01888c2" name="perl-Text-VCardFast" arch="aarch64">
  <version epoch="0" ver="0.11" rel="17.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11-12" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.11-13" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11-14" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.11-15" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.11-16" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.11-17" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3f833948221428b0f95719bef71f4c71b3205126aa73512b3ccce498eee50183" name="perl-Text-vFile-asData" arch="noarch">
  <version epoch="0" ver="0.08" rel="27.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.08-22" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.08-23" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.08-24" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.08-25" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.08-26" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.08-27" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b57b17e1c0d36943ed938cd60a1e1835ba1fd289e5b8eb7cbee2a14c4865fa0c" name="perl-Tie-DataUUID" arch="noarch">
  <version epoch="0" ver="1.02" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.02-11" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.02-12" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.02-13" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.02-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.02-15" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.02-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ef7c206affd78ff62239e0bd829c19cbfa65bfea5216d56f6fa341fc68d9aa2c" name="perl-Tk-tests" arch="aarch64">
  <version epoch="0" ver="804.035" rel="8.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 804.035-8" date="1710331200">- Enable building with FreeType support
- Package tests
- Resolves: RHEL-25202</changelog>
</package>
<package pkgid="8f677fb4b3c6b9cfcb565f351a652129ccf7bf0d8ca657db8859a11457e5bfe5" name="perl-UNIVERSAL-require" arch="noarch">
  <version epoch="0" ver="0.19" rel="3.el9"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.18-17" date="1567771200">- Use author-independent source URL
- Simplify find command using -delete</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18-18" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.18-19" date="1592827200">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18-20" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18-21" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.19-1" date="1616846400">- Update to 0.19
  - Noted that the module is now deprecated
  - Added a list of alternatives to SEE ALSO</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.19-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.19-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="182f7a1871477c8d1f4a334c86ffea1d7f1bd5ced79ba20917942a37fa45fe70" name="perl-URI-tests" arch="noarch">
  <version epoch="0" ver="5.09" rel="3.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.76-8" date="1593172800">- Perl 5.32 re-rebuild of bootstrapped packages</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 1.76-9" date="1595937600">- Modernize a spec file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.05-1" date="1603281600">- 5.05 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 5.06-1" date="1610712000">- 5.06 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.06-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.07-1" date="1612094400">- 5.07 bump</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 5.08-1" date="1614513600">- 5.08 bump</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 5.09-1" date="1614772800">- 5.09 bump
- Package tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.09-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.09-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="39709b3ed0393e292b7018386ecbbff257a88a95aff66e90b7868c1657319984" name="perl-XML-Fast" arch="aarch64">
  <version epoch="0" ver="0.17" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-10" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.17-11" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-12" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17-13" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.17-14" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.17-15" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="20aa95812b632d661165f7a75d5f0de29fd6f7daad889d9dc59915054dfad6a7" name="perl-XML-Filter-BufferText" arch="noarch">
  <version epoch="0" ver="1.01" rel="40.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.01-35" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.01-36" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.01-37" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.01-38" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.01-39" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.01-40" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b8da425295c295969a9c45332458948b017d7d22190d08ac832c5f68f274e928" name="perl-XML-Generator" arch="noarch">
  <version epoch="0" ver="1.04" rel="30.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.04-24" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.04-25" date="1582891200">- Use make_* macros</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.04-26" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.04-27" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.04-28" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.04-29" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.04-30" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="045eb2315ddc0e08ecdb582df68e94b60a3d8416a9f797c08e7d0618c27c2b5a" name="perl-XML-Parser-tests" arch="aarch64">
  <version epoch="0" ver="2.46" rel="9.1.el9_7"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.46-9.1" date="1774526400">- Fix CVE-2006-10002, CVE-2006-10003</changelog>
</package>
<package pkgid="91af1b90492fbf5c070ea71336eb07ae48be9e01c642a1af5864c33a10eb7108" name="perl-XML-SAX-Writer" arch="noarch">
  <version epoch="0" ver="0.57" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.57-8" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.57-9" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.57-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.57-11" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.57-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.57-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="59c19c3fb823d93f4eea59659d5eebb1ac9c0925d1302b137e2830a80d437fbb" name="perl-XML-SemanticDiff" arch="noarch">
  <version epoch="0" ver="1.0007" rel="11.el9"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.0007-5" date="1567425600">- Avoid trying to pull in Test::TrailingSpace for EL-8 builds</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0007-6" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.0007-7" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0007-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0007-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0007-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0007-11" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="facb8d3e852d50a42fb88b0b170cbd5e5a11546caa1a0c23471e4dd23d99fc1f" name="perl-XML-Simple-tests" arch="noarch">
  <version epoch="0" ver="2.25" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.25-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.25-8" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.25-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.25-10" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.25-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.25-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.25-13" date="1629201600">- Resolves: rhbz#1989824 - Enable gating</changelog>
</package>
<package pkgid="5f87c0dc31eb48a80d2652b30113c5a3bb380066027720e35210b82af4a0e8c4" name="perl-XML-Spice" arch="noarch">
  <version epoch="0" ver="0.05" rel="16.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.05-11" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.05-12" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.05-13" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.05-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.05-15" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.05-16" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f912793e1b478172d45cfe491a776bb290de08808f768a372efae899ac97f464" name="perl-YAML-LibYAML-tests" arch="aarch64">
  <version epoch="1" ver="0.82" rel="7.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1:0.82-7" date="1748952000">- Use 3-arg form of open in LoadFile (CVE-2025-40908)</changelog>
</package>
<package pkgid="20caed53725782fa366c9d346f415d97e50260d2f148a1e6503eb932197670d0" name="perl-generators-tests" arch="noarch">
  <version epoch="0" ver="1.13" rel="1.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.13-1" date="1731585600">- Resolves: RHEL-5537 - 1.13 bump
- Package tests</changelog>
</package>
<package pkgid="dc3b12723c732bf048c45ac3ce2b692c48b87fd52e79aa4add050d287d26a551" name="perl-homedir" arch="noarch">
  <version epoch="0" ver="2.000024" rel="13.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.000024-8" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.000024-9" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.000024-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.000024-11" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.000024-12" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.000024-13" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ddb8ff0ae3b6592b2892d301305ab06d5c1c048679a58ae1b97f09d90bfb4f03" name="perl-lasso" arch="aarch64">
  <version epoch="0" ver="2.7.0" rel="12.el9"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 2.7.0-12" date="1762516800">- Fixing CVE-2025-47151
  Resolves: RHEL-126685 CVE-2025-47151 lasso: Type confusion in Entr'ouvert Lasso</changelog>
</package>
<package pkgid="aafdd4f1a268411ad09f183421387a297bfe79736f7e83fe6c347e75b6ef15e9" name="perl-libwww-perl-tests" arch="noarch">
  <version epoch="0" ver="6.53" rel="4.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.48-1" date="1600689600">- 6.48 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.49-1" date="1600948800">- 6.49 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.50-1" date="1608206400">- 6.50 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.51-1" date="1609848000">- 6.51 bump</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.52-1" date="1610107200">- 6.52 bump</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.52-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.53-1" date="1615204800">- 6.53 bump
- Package tests</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 6.53-2" date="1615291200">- Package talk-to-ourself script with the tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.53-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.53-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="84a89ea51e53653d45d141dfc6db376776c410de2473807e71cababd9c2d9d67" name="perl-libxml-perl-tests" arch="noarch">
  <version epoch="0" ver="0.08" rel="45.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.08-45" date="1719835200">- Resolves: RHEL-43290
- Package tests</changelog>
</package>
<package pkgid="e3d7e63d364417d543bd343bf2c4a54eac1b3f5e3c0ddd6bf04ae024babffb41" name="perl-perlfaq-tests" arch="noarch">
  <version epoch="0" ver="5.20210520" rel="1.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 5.20210520-1" date="1731585600">- Resolves: RHEL-5538 - 5.20210520 bump
- Package tests</changelog>
</package>
<package pkgid="e144c7d8fccca9e489deade08d1b5b7e485ff4a174e09984c749ac037db0844e" name="perl-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="4.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-3" date="1712664000">- Some static analysis fixes for unitialized structs
  Resolves: RHEL-25498
- Fix a memory leak in parse_package() of repo conda (RHEL-25496)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
</package>
<package pkgid="4eca60b8d2eb6924d7551221e31282345c24d52a94e1c41fe67f100a535c87d9" name="perl-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="2c07af817635486adc2977a855e688f52204c8d67dcee1eb85201e343ce14df2" name="perl-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="1c387454d45e2a062bb85b8f9c3786a980e1fe8d4a436807edff1614d3e07f49" name="perl-strictures" arch="noarch">
  <version epoch="0" ver="2.000006" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.000006-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.000006-8" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.000006-9" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.000006-10" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.000006-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.000006-12" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7aa24de16d6795021d3ee67b531e8ea49b25a072a7bf4175c57329bcd043ec7c" name="perl-tests" arch="aarch64">
  <version epoch="4" ver="5.32.1" rel="481.1.el9_6"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.32.1-481" date="1701086400">- Fixes: CVE-2023-47038</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 4:5.32.1-481.1" date="1751544000">- Fixes: CVE-2025-40909 - Clone dirhandles without fchdir</changelog>
</package>
<package pkgid="a105e3607585df141bac42c3ae7761e646aa42324b4d9291198fa52377166507" name="perl-utf8-all" arch="noarch">
  <version epoch="0" ver="0.024" rel="14.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.024-8" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.024-9" date="1583841600">- BR: perl(blib) for t/00-compile.t</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.024-10" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.024-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.024-12" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.024-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.024-14" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e2ece6985a8b2fa3ccee371314c9d80a529902fe1244ba7f4e464db4a6406727" name="pinentry-emacs" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 1.1.0-9" date="1609934400">- enable pinentry-tty</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-1" date="1611316800">- New upstream release (#1919127)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-2" date="1611662400">- Move pinentry-tty to separate subpackage (#1782442)
- Update the wrapper selecting the appropriate version (#1918969)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-4" date="1618401600">- Fix issues reported by coverity</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-5" date="1618488000">- Address few more minor issues reported by coverity</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-7" date="1618574401">- Honor the disabled rpath
- Sync final version of coverity patches from upstream (#1938729)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="886a91b9415d844de5b56ee9fd9114d00da915419eddbb107247dc42918c1297" name="pinentry-gtk" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 1.1.0-9" date="1609934400">- enable pinentry-tty</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-1" date="1611316800">- New upstream release (#1919127)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-2" date="1611662400">- Move pinentry-tty to separate subpackage (#1782442)
- Update the wrapper selecting the appropriate version (#1918969)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-4" date="1618401600">- Fix issues reported by coverity</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-5" date="1618488000">- Address few more minor issues reported by coverity</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-7" date="1618574401">- Honor the disabled rpath
- Sync final version of coverity patches from upstream (#1938729)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f9d765121a13e44c7493525be79c49c52425b0577477a1ad5c01e74aa47ac755" name="pinentry-qt" arch="aarch64">
  <version epoch="0" ver="1.1.1" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 1.1.0-9" date="1609934400">- enable pinentry-tty</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-1" date="1611316800">- New upstream release (#1919127)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-2" date="1611662400">- Move pinentry-tty to separate subpackage (#1782442)
- Update the wrapper selecting the appropriate version (#1918969)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-4" date="1618401600">- Fix issues reported by coverity</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-5" date="1618488000">- Address few more minor issues reported by coverity</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 1.1.1-7" date="1618574401">- Honor the disabled rpath
- Sync final version of coverity patches from upstream (#1938729)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8809d7a1f6b9b7fdc285c298f90775e162e61a8e0407bf60f683b033cfe07b99" name="pipewire-config-raop" arch="aarch64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164830</changelog>
</package>
<package pkgid="43f0e82024a17e3feb8676f366344c6cae4ea3f6a9776f18d1db710aa8562b8f" name="pipewire-config-raop" arch="aarch64">
  <version epoch="0" ver="1.4.9" rel="1.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-1" date="1704715200">- Update to version 1.0.0
- Add patch to avoid crash in deviceprovider.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-2" date="1704801600">- Fix install conflict with older versions.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.1-1" date="1705406400">- Update to version 1.0.1
- Add patch to revert timestamps
- Resolves: RHEL-17641, RHEL-21900</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
</package>
<package pkgid="7cb78ead3a813f3a51e35ce02401176a64ec639d8284b75f2d2a3e7570c047cb" name="pipewire-config-rates" arch="aarch64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164830</changelog>
</package>
<package pkgid="f46ff6e389bf68043e6e5e2ecb0c30bb08613d1407297d023d9299919c23c8d0" name="pipewire-config-rates" arch="aarch64">
  <version epoch="0" ver="1.4.9" rel="1.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-1" date="1704715200">- Update to version 1.0.0
- Add patch to avoid crash in deviceprovider.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-2" date="1704801600">- Fix install conflict with older versions.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.1-1" date="1705406400">- Update to version 1.0.1
- Add patch to revert timestamps
- Resolves: RHEL-17641, RHEL-21900</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
</package>
<package pkgid="6c7ec1f1047d2d328040132a77e8840dcef2ed7fceae6a60e4281edc601eb6d1" name="pipewire-config-upmix" arch="aarch64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164830</changelog>
</package>
<package pkgid="0093e0a31e8bc417cd019e592a8e62d76707bb8af228efdb968cdd692aebeefa" name="pipewire-config-upmix" arch="aarch64">
  <version epoch="0" ver="1.4.9" rel="1.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-1" date="1704715200">- Update to version 1.0.0
- Add patch to avoid crash in deviceprovider.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-2" date="1704801600">- Fix install conflict with older versions.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.1-1" date="1705406400">- Update to version 1.0.1
- Add patch to revert timestamps
- Resolves: RHEL-17641, RHEL-21900</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
</package>
<package pkgid="400cfdd0fd7b8eee2cf0441650dec9c88df5757a7cc205b8230931c12f239c36" name="pipewire-doc" arch="aarch64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164830</changelog>
</package>
<package pkgid="040cf4bcdd9bb3772d04b2d051e7517595c2f96125817018983f0550594bcca0" name="pipewire-doc" arch="aarch64">
  <version epoch="0" ver="1.4.9" rel="1.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-1" date="1704715200">- Update to version 1.0.0
- Add patch to avoid crash in deviceprovider.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-2" date="1704801600">- Fix install conflict with older versions.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.1-1" date="1705406400">- Update to version 1.0.1
- Add patch to revert timestamps
- Resolves: RHEL-17641, RHEL-21900</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
</package>
<package pkgid="b48626dfb0d3774b90bf49f29fdc8f929624c35fe52f74d8b5a3f67fe83b0200" name="pipewire-plugin-vulkan" arch="aarch64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164830</changelog>
</package>
<package pkgid="22d4acb904beca8bfc0de1341885c17098ee2d82dde6f06b6d4101ae9c010d4f" name="pipewire-plugin-vulkan" arch="aarch64">
  <version epoch="0" ver="1.4.9" rel="1.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-1" date="1704715200">- Update to version 1.0.0
- Add patch to avoid crash in deviceprovider.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-2" date="1704801600">- Fix install conflict with older versions.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.1-1" date="1705406400">- Update to version 1.0.1
- Add patch to revert timestamps
- Resolves: RHEL-17641, RHEL-21900</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
</package>
<package pkgid="fd08f26042392fac24b7f93282a3fef94a06d8a43b8bf241debb8975d18f2071" name="pipewire-v4l2" arch="aarch64">
  <version epoch="0" ver="1.4.11" rel="1.el9_8"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.11-1" date="1778846400">- Rebase to 1.4.11
- Add fixes for CVE-2026-5674
  Resolves: RHEL-164830</changelog>
</package>
<package pkgid="e8b28c9050176bb43f02cf07235676e11c5e13ea83561b6901dae6eb5a808ddb" name="pipewire-v4l2" arch="aarch64">
  <version epoch="0" ver="1.4.9" rel="1.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-1" date="1704715200">- Update to version 1.0.0
- Add patch to avoid crash in deviceprovider.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.0-2" date="1704801600">- Fix install conflict with older versions.
- Resolves: RHEL-17641</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.1-1" date="1705406400">- Update to version 1.0.1
- Add patch to revert timestamps
- Resolves: RHEL-17641, RHEL-21900</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.7-1" date="1718366400">- Rebase to 1.0.7</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.6-1" date="1751889600">- Rebase to 1.4.6
  Resolves: DESKTOP-2312</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.4.9-1" date="1763726400">- Rebase to 1.4.9
  Resolves: RHEL-123614</changelog>
</package>
<package pkgid="7cde5c19a73bc226c4fd0d947d6fb5dc061902ac9e567c0e3d356c96104af9c0" name="pki-jackson-annotations-javadoc" arch="noarch">
  <version epoch="0" ver="2.19.1" rel="1.el9_6"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752667200">- Update to version 2.19.1
- Resolves: RHEL-100233</changelog>
</package>
<package pkgid="ad7d1e80cf6c36236b95be9c30a392fb00565ffc7a4bdb957fc63631dfc28b80" name="pki-jackson-annotations-javadoc" arch="noarch">
  <version epoch="0" ver="2.21" rel="1.el9_8"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752667200">- Update to version 2.19.1
- Resolves: RHEL-100233</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.21-1" date="1783339200">- Update to version 2.21
- Resolves: RHEL-188300</changelog>
</package>
<package pkgid="ef2c50765e3a3d2ce5ecef94b0b7fd5de2a8af1b0ee37ba8a2d66e597eaebd14" name="pki-jackson-bom" arch="noarch">
  <version epoch="0" ver="2.19.1" rel="1.el9"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.16.0-1" date="1701777600">- Rebase to version 2.16.0</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752494400">- Rebase to version 2.19.1
- Resolves: RHEL-100270</changelog>
</package>
<package pkgid="410f7e0e5912e48aaffe5a292a44db30c800329f374aa7f7d046e6db93c5ee7b" name="pki-jackson-bom" arch="noarch">
  <version epoch="0" ver="2.21.4" rel="1.el9_8"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752494400">- Rebase to version 2.19.1
- Resolves: RHEL-100270</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.21.4-1" date="1783080000">- Rebase to version 2.21.4
- Resolves: RHEL-190943</changelog>
</package>
<package pkgid="c16a79850dea8d064203018a5555904b29430609906cb2913ce477b3892d2386" name="pki-jackson-jaxrs-providers-datatypes" arch="noarch">
  <version epoch="0" ver="2.19.1" rel="1.el9_6"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752840000">- Update to version 2.19.1
- Resolves: RHEL-100239</changelog>
</package>
<package pkgid="ae203ce5192c018483fbff97b964ad6fdd7063c774e8250774646cd5ce2c3799" name="pki-jackson-jaxrs-providers-datatypes" arch="noarch">
  <version epoch="0" ver="2.21.4" rel="1.el9_8"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752840000">- Update to version 2.19.1
- Resolves: RHEL-100239</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.21.4-1" date="1783425600">- Update to version 2.21.4
- Resolves: RHEL-190937</changelog>
</package>
<package pkgid="991f29bc027f67c69fe4b009c018e41aed6372640a87573e767be31bd03294e9" name="pki-jackson-jaxrs-providers-javadoc" arch="noarch">
  <version epoch="0" ver="2.19.1" rel="1.el9_6"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752840000">- Update to version 2.19.1
- Resolves: RHEL-100239</changelog>
</package>
<package pkgid="446c26204d07e97b02dc65f58046030c8c6b18335634e8311d78261126385db3" name="pki-jackson-jaxrs-providers-javadoc" arch="noarch">
  <version epoch="0" ver="2.21.4" rel="1.el9_8"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752840000">- Update to version 2.19.1
- Resolves: RHEL-100239</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.21.4-1" date="1783425600">- Update to version 2.21.4
- Resolves: RHEL-190937</changelog>
</package>
<package pkgid="af0f96517f88dee173a1453945d4af9d040920894e4bf05b0b58e34a3bc3f18b" name="pki-jackson-jaxrs-providers-parent" arch="noarch">
  <version epoch="0" ver="2.19.1" rel="1.el9_6"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752840000">- Update to version 2.19.1
- Resolves: RHEL-100239</changelog>
</package>
<package pkgid="f734ae5e4f70bb959aed05d2c3f3fc4e35177791a06640865aa47ed8e56be00e" name="pki-jackson-jaxrs-providers-parent" arch="noarch">
  <version epoch="0" ver="2.21.4" rel="1.el9_8"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752840000">- Update to version 2.19.1
- Resolves: RHEL-100239</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.21.4-1" date="1783425600">- Update to version 2.21.4
- Resolves: RHEL-190937</changelog>
</package>
<package pkgid="3f8f18e24f0498d3ef25c1c5721fe1215845ad0157a2b61c9a09c4895dd1a1a9" name="pki-jackson-modules-base" arch="noarch">
  <version epoch="0" ver="2.19.1" rel="1.el9_6"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752753600">- Update to version 2.19.1
- Resolves: RHEL-100245</changelog>
</package>
<package pkgid="27f376626bcfb6aaa628cce6431708d7cf73edfaeda406550a20f5d7ebdde88f" name="pki-jackson-modules-base" arch="noarch">
  <version epoch="0" ver="2.21.4" rel="1.el9_8"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.1-1" date="1752753600">- Update to version 2.19.1
- Resolves: RHEL-100245</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.21.4-1" date="1783425600">- Update to version 2.21.4
- Resolves: RHEL-190947</changelog>
</package>
<package pkgid="76bba1a1be0fe101192615428250bdd02e5ffaf95e09ea666a22496d65d87ce3" name="pki-jackson-parent" arch="noarch">
  <version epoch="0" ver="2.19.2" rel="1.el9"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.16-1" date="1701777600">- Rebase to version 2.16</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.2-1" date="1752494400">- Rebase to version 2.19.2
- Resolves: RHEL-100270</changelog>
</package>
<package pkgid="106493322e0955e78a33b34fde176ea7a90fbeaf8645ff9c806eb834382379e8" name="pki-jackson-parent" arch="noarch">
  <version epoch="0" ver="2.21" rel="1.el9_8"/>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.19.2-1" date="1752494400">- Rebase to version 2.19.2
- Resolves: RHEL-100270</changelog>
  <changelog author="Red Hat PKI Team &lt;rhcs-maint@redhat.com&gt; - 2.21-1" date="1783080000">- Rebase to version 2.21
- Resolves: RHEL-188300</changelog>
</package>
<package pkgid="1d31862ca5ce4649eaad27095df1c24090d06291338c01202270eaf3e76c20fa" name="platform-python-coverage" arch="aarch64">
  <version epoch="0" ver="4.5.1" rel="9.el9"/>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.5.1-8" date="1627646400">- Adjusted the postun scriptlets to enable upgrading to RHEL 9
- Resolves: rhbz#1933055</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 4.5.1-9" date="1629720000">- Bump release to rebuild</changelog>
</package>
<package pkgid="078a03eb1e3c45d9b048a6d4d0a3c4c7697eaeee5674313ec4a6106cc1fefd6a" name="plexus-archiver" arch="noarch">
  <version epoch="0" ver="4.10.0" rel="3.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.8.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.9.0-1" date="1701691200">- Update to upstream version 4.9.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.9.1-1" date="1706788800">- Update to upstream version 4.9.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.9.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.9.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.1-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.10.0-1" date="1724414400">- Update to upstream version 4.10.0
- Resolves: rhbz#2269638</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.10.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="8a6237e61195a290d7de2ee031b5ef6faae7818e11f35629727882cbec1a796d" name="plexus-archiver" arch="noarch">
  <version epoch="0" ver="4.2.7" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-1" date="1607083200">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:4.2.3-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:4.2.4-1" date="1612008000">- Update to version 4.2.4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.4-1" date="1613131200">- Update to upstream version 4.2.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.4-3" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.4-4" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.4-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.7-1" date="1650801600">- Update to upstream version 4.2.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.7-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="66fe412ca867b9fc2874e2f51e67d6f7ae54f85041485d345b0e0f90e57c904f" name="plexus-archiver-javadoc" arch="noarch">
  <version epoch="0" ver="4.10.0" rel="3.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.8.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.9.0-1" date="1701691200">- Update to upstream version 4.9.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.9.1-1" date="1706788800">- Update to upstream version 4.9.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.9.1-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.9.1-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.1-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.10.0-1" date="1724414400">- Update to upstream version 4.10.0
- Resolves: rhbz#2269638</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.10.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="8cc1331c80a07a1cf337a018ed379853d8087c72a38051a339afadf49fc71d91" name="plexus-archiver-javadoc" arch="noarch">
  <version epoch="0" ver="4.2.4" rel="5.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.2-1" date="1596456000">- Update to upstream version 4.2.2</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:4.2.3-1" date="1603540800">- Update to version 4.2.3.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-1" date="1607083200">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:4.2.3-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:4.2.4-1" date="1612008000">- Update to version 4.2.4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.4-1" date="1613131200">- Update to upstream version 4.2.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.4-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.4-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7c841ca867450427088782f8440abc75b0dbba1683cb97b4f431e905a6d9b1ac" name="plexus-archiver-javadoc" arch="noarch">
  <version epoch="0" ver="4.2.7" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.3-1" date="1607083200">- Update to upstream version 4.2.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:4.2.3-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:4.2.4-1" date="1612008000">- Update to version 4.2.4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.2.4-1" date="1613131200">- Update to upstream version 4.2.4</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.4-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.4-3" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.4-4" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.2.4-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.7-1" date="1650801600">- Update to upstream version 4.2.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.7-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="56aec1a1e3cf79203690bee0f3f32187c82599c5f8e96346835860389a2a3baf" name="plexus-build-api" arch="noarch">
  <version epoch="0" ver="0.0.7" rel="37.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-30" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-31" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-32" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-33" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-34" date="1635854400">- Set explicit Java compiler source/target levels to 1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-35" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0.0.7-36" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-37" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="61e3ce296e78248250fe571efeb0b2de1b7a260c6e0901c7925824f7f9b1d18f" name="plexus-build-api" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="14.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-39" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-1" date="1692619200">- Update to upstream version 1.2.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-13" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="8d2aaf0aed1a81d0d9cdbbbf515b547318c2ac7ded4b9839ea8521db61620721" name="plexus-build-api-javadoc" arch="noarch">
  <version epoch="0" ver="0.0.7" rel="35.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.0.7-26" date="1574683200">- Remove unnecessary dependency on parent POM.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-27" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0.0.7-28" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 0.0.7-29" date="1594900800">- Unecessary restriction on plexus-util, with the patch it's actually still
  source compatible with older versions</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-30" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-31" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-32" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-33" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-34" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.0.7-35" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7c787f4c876eb14e948bc7a0f640227d1e5986733c5b3af73fae12377a693e57" name="plexus-build-api-javadoc" arch="noarch">
  <version epoch="0" ver="0.0.7" rel="37.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-30" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-31" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-32" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-33" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-34" date="1635854400">- Set explicit Java compiler source/target levels to 1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-35" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0.0.7-36" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-37" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="3d42724ed629f07a3517d3503203d4338b23388efbd674f3ab59e0d800d8c8c4" name="plexus-build-api-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="14.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-39" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-1" date="1692619200">- Update to upstream version 1.2.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-8" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-13" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="3328107472a2bab8199992a00f0fe472fbc5955cab3fd12453f1d78575f3cd80" name="plexus-build-api0" arch="noarch">
  <version epoch="0" ver="0.0.7" rel="49.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-39" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-40" date="1692619200">- Rename plexus-build-api to plexus-build-api0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-41" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-42" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-43" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0.0.7-44" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-45" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-46" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-47" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-48" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="cd0c3d80fa15eab355884ee957ba1ceec29b95c70337042e3f8c1d974ae883b8" name="plexus-build-api0-javadoc" arch="noarch">
  <version epoch="0" ver="0.0.7" rel="49.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-39" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-40" date="1692619200">- Rename plexus-build-api to plexus-build-api0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-41" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-42" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-43" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0.0.7-44" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-45" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.7-46" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-47" date="1721822400">- Install license files in licensedir instead of docdir</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.0.7-48" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="a4885401eb05a539293acfdaf9b4d2b989cce304ac4e71a550bc1e60ce7ea995" name="plexus-cipher" arch="noarch">
  <version epoch="0" ver="2.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-21" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-22" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7-23" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-24" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@gmail.com&gt; - 1.8-1" date="1629892800">- Update to version 1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-2" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.8-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-1" date="1650801600">- Update to upstream version 2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="20a80a6e6fd63012e5225e8bc11745c81db2c765f29643a6df2ea320c9830af9" name="plexus-cipher" arch="noarch">
  <version epoch="0" ver="2.0" rel="25.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.0-5" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-6" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.0-10" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-12" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-24" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="79d4c2ee560e4f2375cb5e2185f66c5fdf7cc45ec2714a06a9d73bea9466f9d5" name="plexus-cipher-javadoc" arch="noarch">
  <version epoch="0" ver="1.7" rel="30.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7-27" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7-28" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7-29" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7-30" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="dd360304c1f535f3b6a9d62fc34e34031c60a21e04ae8f3a53d534a76c6b856c" name="plexus-cipher-javadoc" arch="noarch">
  <version epoch="0" ver="2.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-21" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-22" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7-23" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-24" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@gmail.com&gt; - 1.8-1" date="1629892800">- Update to version 1.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-2" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.8-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-1" date="1650801600">- Update to upstream version 2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="7fbf6d98b0b4600b49bcb446cc0e915bbb069dedfed64ecb02b56851820fa476" name="plexus-cipher-javadoc" arch="noarch">
  <version epoch="0" ver="2.0" rel="25.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.0-5" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-6" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.0-10" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-12" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-24" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="03add00113d85de15fc124a9bb3f9e83b5627a0cdf9e6c003776493020268958" name="plexus-cipher-javadoc" arch="noarch">
  <version epoch="0" ver="2.0" rel="25.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.0-5" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-6" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.0-10" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-11" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-12" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-24" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="cdd193952dbf14cfd24e0a94b5c389867def8351c6e3bcc475181c1a0603014c" name="plexus-cipher-javadoc" arch="noarch">
  <version epoch="0" ver="2.0" rel="3.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.8-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-1" date="1650801600">- Update to upstream version 2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-3" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="f34fc13f5516a91016c5f4e73a99a117677d8243bd98975a02db96350a67e49d" name="plexus-classworlds" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="12.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.6.0-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-8" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-9" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.6.0-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.6.0-11" date="1651233600">- Add missing test dependency on JUnit 4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-12" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="c3b853bbfaba36f729b7cf371c385395d7c2c4b7ae092fd9f7926b970c245e59" name="plexus-classworlds" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.7.0-1" date="1691755200">- Update to upstream version 2.7.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.0-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.0-1" date="1706788800">- Update to upstream version 2.8.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.0-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="7e5b7ae48fe74c842b8c368e7e6dbaee28d4980c529ae62afe2e9560f0d79f8b" name="plexus-classworlds-javadoc" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="12.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.6.0-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-8" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-9" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.6.0-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.6.0-11" date="1651233600">- Add missing test dependency on JUnit 4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-12" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="8c5c2e39d559852e287716572b77f39c67affabc3525a1f299fef4bda383216b" name="plexus-classworlds-javadoc" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="13.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.6.0-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.6.0-11" date="1651233600">- Add missing test dependency on JUnit 4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-12" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.6.0-13" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="68dabe1404100e7d1783e646deb477dcb51e7d789e79f28cec1d8dc57cc32dac" name="plexus-classworlds-javadoc" arch="noarch">
  <version epoch="0" ver="2.6.0" rel="14.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.6.0-11" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.6.0-12" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.6.0-13" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.6.0-14" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="46036c57799cde9d57d9cb45afc1e24a4cc744b92e0b24a889b770600af8ccb8" name="plexus-classworlds-javadoc" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.7.0-1" date="1691755200">- Update to upstream version 2.7.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.0-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.0-1" date="1706788800">- Update to upstream version 2.8.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.0-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="922cfc18dc7c2b91231a2d92c19a2de0733c16d69b90dd5a231e3f49a6cb638b" name="plexus-classworlds-javadoc" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="9.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.7.0-1" date="1691755200">- Update to upstream version 2.7.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.0-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.0-1" date="1706788800">- Update to upstream version 2.8.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.0-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b1e782f576a2642555dd24aeeb6def13667a5b3ff050a6505f90211e28f7372d" name="plexus-compiler" arch="noarch">
  <version epoch="0" ver="2.11.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.7-1" date="1597579200">- Update to version 2.8.7.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.8-1" date="1598616000">- Update to version 2.8.8.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.8-1" date="1599825600">- Update to upstream version 2.8.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.8.8-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-3" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-4" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.8-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.11.1-1" date="1650801600">- Update to upstream version 2.11.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="1d9a240b021b0f576667e1e3aef12098fa457bde26f97fc1c4c15fc02f7beb4a" name="plexus-compiler" arch="noarch">
  <version epoch="0" ver="2.15.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.13.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.14.1-1" date="1702900800">- Update to upstream version 2.14.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.14.2-1" date="1706788800">- Update to upstream version 2.14.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.14.2-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.14.2-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.15.0-1" date="1712577600">- Update to upstream version 2.15.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-2" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.15.0-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c0b2be5595e59c129a2aebadb8bf7939f1469fe05420e987e3d35c64c6b957e3" name="plexus-compiler-extras" arch="noarch">
  <version epoch="0" ver="2.11.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.7-1" date="1597579200">- Update to version 2.8.7.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.8-1" date="1598616000">- Update to version 2.8.8.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.8-1" date="1599825600">- Update to upstream version 2.8.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.8.8-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-3" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-4" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.8-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.11.1-1" date="1650801600">- Update to upstream version 2.11.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="f8e2fd2bf669c7d72c7b37fab779ce37339b146e2e3ea4fdb8d1fa7fef92ed18" name="plexus-compiler-extras" arch="noarch">
  <version epoch="0" ver="2.15.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.13.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.14.1-1" date="1702900800">- Update to upstream version 2.14.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.14.2-1" date="1706788800">- Update to upstream version 2.14.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.14.2-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.14.2-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.15.0-1" date="1712577600">- Update to upstream version 2.15.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-2" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.15.0-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="30390f8ccea1da81e2e1bbff3996ef178f524030bdf26e39bd5960c05a30bfc1" name="plexus-compiler-extras" arch="noarch">
  <version epoch="0" ver="2.8.8" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.8.6-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.7-1" date="1597579200">- Update to version 2.8.7.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.8-1" date="1598616000">- Update to version 2.8.8.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.8-1" date="1599825600">- Update to upstream version 2.8.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.8.8-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-4" date="1623240000">- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-5" date="1623240001">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.8-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ad3788b173372d7766a0c10945bf629422859135dc12d27821bd15c3d9c71dab" name="plexus-compiler-javadoc" arch="noarch">
  <version epoch="0" ver="2.11.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.7-1" date="1597579200">- Update to version 2.8.7.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.8-1" date="1598616000">- Update to version 2.8.8.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.8-1" date="1599825600">- Update to upstream version 2.8.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.8.8-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-3" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-4" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.8-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.11.1-1" date="1650801600">- Update to upstream version 2.11.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="b177b58bc5ffcee2487f468769bc7f167202fb17475ba5815d7b77aad2dbe16b" name="plexus-compiler-javadoc" arch="noarch">
  <version epoch="0" ver="2.15.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.13.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.14.1-1" date="1702900800">- Update to upstream version 2.14.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.14.2-1" date="1706788800">- Update to upstream version 2.14.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.14.2-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.14.2-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.15.0-1" date="1712577600">- Update to upstream version 2.15.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-2" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.15.0-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="20b393a13dab8d7462b6ea2430408fdfc450aeb33294f1f7d995ed9e57068104" name="plexus-compiler-javadoc" arch="noarch">
  <version epoch="0" ver="2.8.8" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.8.6-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.7-1" date="1597579200">- Update to version 2.8.7.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.8-1" date="1598616000">- Update to version 2.8.8.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.8-1" date="1599825600">- Update to upstream version 2.8.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.8.8-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-4" date="1623240000">- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-5" date="1623240001">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.8-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fe147fcbe5df524709dc79d7857fb8d56c81652f2ab4cb1a7e2f46992f1de74c" name="plexus-compiler-pom" arch="noarch">
  <version epoch="0" ver="2.11.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.7-1" date="1597579200">- Update to version 2.8.7.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.8-1" date="1598616000">- Update to version 2.8.8.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.8-1" date="1599825600">- Update to upstream version 2.8.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.8.8-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-3" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.8-4" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.8-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.11.1-1" date="1650801600">- Update to upstream version 2.11.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="34c7739716cac74b5f948313bafae6a415612bab97f97bea07b3a3e3a26a3067" name="plexus-compiler-pom" arch="noarch">
  <version epoch="0" ver="2.15.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.13.0-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.14.1-1" date="1702900800">- Update to upstream version 2.14.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.14.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.14.2-1" date="1706788800">- Update to upstream version 2.14.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.14.2-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.14.2-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.15.0-1" date="1712577600">- Update to upstream version 2.15.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.15.0-2" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.15.0-6" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b49676f2a9974d0d15aa1005f911c9795fce8fbed8460088b3662c15f24d5756" name="plexus-compiler-pom" arch="noarch">
  <version epoch="0" ver="2.8.8" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.8.6-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.7-1" date="1597579200">- Update to version 2.8.7.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.8.8-1" date="1598616000">- Update to version 2.8.8.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.8-1" date="1599825600">- Update to upstream version 2.8.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.8.8-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-4" date="1623240000">- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.8-5" date="1623240001">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.8-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2513282c453b79b4fbd4000eb98df32a67f904829fdffc4669e038822c094ba3" name="plexus-components-pom" arch="noarch">
  <version epoch="0" ver="6.5" rel="6.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.3-1" date="1596024000">- Update to upstream version 6.3</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 6.4-1" date="1597579200">- Update to version 6.4.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.4-1" date="1599825600">- Update to upstream version 6.4</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 6.5-1" date="1603540800">- Update to version 6.5.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.5-1" date="1607688000">- Update to upstream version 6.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.5-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.5-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.5-4" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.5-5" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.5-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="15b45e18a3f040912cbdf782c79313d945fa1c4ab2416dd67b3888a0a4969682" name="plexus-components-pom" arch="noarch">
  <version epoch="0" ver="6.6" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.4-1" date="1599825600">- Update to upstream version 6.4</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 6.5-1" date="1603540800">- Update to version 6.5.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.5-1" date="1607688000">- Update to upstream version 6.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.5-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.5-3" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.5-4" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.5-5" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.5-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.6-1" date="1650801600">- Update to upstream version 6.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.6-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5f12afd02376356f9e9f3bf5b21dea70241fc361eb12e0121a3b659ece297613" name="plexus-containers" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="13.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-10" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.0-11" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.0-12" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.0-13" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="bd7273fcbdfb096f6ae2bbe7d910bd3f8274a7d9aeb9c4072cac3ec7b91ea8e6" name="plexus-containers" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-7" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-1" date="1651233600">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="419309d50e61f27fbf2833695ed59ceeaed359d926be73f5f86f742be30477be" name="plexus-containers" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="3.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-1" date="1651233600">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-3" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="13633a8656bf7fc7a2b806b799e86d29c4226dc9d48731df3873a7c70be2143e" name="plexus-containers-component-annotations" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-7" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-1" date="1651233600">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="b13f3752735671c842d3e257bda9c5b5d033c50fa8b8e770f1f2588aa4a33d7d" name="plexus-containers-component-annotations" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="10.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.1-5" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-6" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2.0-1" date="1706961600">- Update to upstream version 2.2.0
- Drop obsolete plexus-containers-container-default</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.0-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="6d2d8cde654dde49b4e5e717a60da7a8db5a7ce500e0643d5f96f4c0af59d8d0" name="plexus-containers-component-metadata" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="13.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-10" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.0-11" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.0-12" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.0-13" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="0581b4fbaea3a49d41abd5b5ad3c88ceabe76514a97c9bd9b727f372547f8e0a" name="plexus-containers-component-metadata" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-7" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-1" date="1651233600">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="207818651fa9473f662741c5f880e9c22d22127d86c9ff4b70a700db8859fe50" name="plexus-containers-component-metadata" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="3.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-1" date="1651233600">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-3" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="55670b2188a5410fe858a64fa28283af6b61bf81f92287c251a28d778eff6a50" name="plexus-containers-component-metadata" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="10.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.1-5" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-6" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2.0-1" date="1706961600">- Update to upstream version 2.2.0
- Drop obsolete plexus-containers-container-default</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.0-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e1404eb251d653226bd6e12bb210fe57bb897b3461e130b6e95fa9b142108a25" name="plexus-containers-component-metadata" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="10.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.1-5" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-6" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2.0-1" date="1706961600">- Update to upstream version 2.2.0
- Drop obsolete plexus-containers-container-default</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.0-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="efb77928b77b88c2a30d18bca2d45f0ed934947042f88f46d652152e8bc72bd0" name="plexus-containers-container-default" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-7" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-1" date="1651233600">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="5d706b0b32f99ccff7cb42a4f99a88bb107265bea12ca13eedd3ad7414119afd" name="plexus-containers-container-default" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="3.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-1" date="1651233600">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-3" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="248ff63c0512404d958d91dddaf962e7de921a380487eacbd2df26dbee967d44" name="plexus-containers-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="13.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-10" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.0-11" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.0-12" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.1.0-13" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="0b9caeda2eaa8e01750943a13f706bb5a152645e1eafc4b5553e163a7f467856" name="plexus-containers-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-7" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-1" date="1651233600">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e8b1d5dd532ac5fd4e1329e13624dd15be6fde7639f5039a9b95144412e3d734" name="plexus-containers-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.1" rel="3.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-1" date="1651233600">- Update to upstream version 2.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-3" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="517035fa26a24e33959af084fbcd36ae9a4671c78e3c2339770ea3fe10cf4b77" name="plexus-containers-javadoc" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="10.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.1-5" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-6" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2.0-1" date="1706961600">- Update to upstream version 2.2.0
- Drop obsolete plexus-containers-container-default</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.0-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="9d70ee6ba83f43728a606083db59a6ee74803288464736dc90ce2e01d28cf4d5" name="plexus-containers-javadoc" arch="noarch">
  <version epoch="0" ver="2.2.0" rel="10.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.1.1-5" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-6" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.1-7" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-8" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.1-9" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2.0-1" date="1706961600">- Update to upstream version 2.2.0
- Drop obsolete plexus-containers-container-default</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.2.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.0-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.2.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1f82f4804e3bb3277810fe4dbb3023b2016fe21ec93801339265aa716eb3c8bf" name="plexus-interpolation" arch="noarch">
  <version epoch="0" ver="1.26" rel="12.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-8" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-9" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.26-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-11" date="1651233600">- Add missing test dependency on JUnit 4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-12" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="7a37b01e5cd3aaf66ad92b6684bedeca67f0628492445b324fc89611709b12fb" name="plexus-interpolation" arch="noarch">
  <version epoch="0" ver="1.27" rel="10.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.26-15" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-16" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-17" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-18" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-19" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27-1" date="1706788800">- Update to upstream version 1.27</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.27-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.27-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.27-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="87a2fde4d0e5f2ee3d4ae19c612449be2f79a09269d6f6a734816136fcbd9006" name="plexus-interpolation-javadoc" arch="noarch">
  <version epoch="0" ver="1.26" rel="12.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-8" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-9" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.26-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-11" date="1651233600">- Add missing test dependency on JUnit 4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-12" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="575885af65c053c3276da7c29a53abda5b89b5ba5b8d4acb4793318afd6e495c" name="plexus-interpolation-javadoc" arch="noarch">
  <version epoch="0" ver="1.26" rel="13.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.26-10" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-11" date="1651233600">- Add missing test dependency on JUnit 4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-12" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-13" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="56469e7a3d28a66ff7008a974bfe668ab18ed84c2340fba622955bb0edc79a61" name="plexus-interpolation-javadoc" arch="noarch">
  <version epoch="0" ver="1.26" rel="15.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-11" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.26-12" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.26-13" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.26-14" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.26-15" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="7a78f1e9cb97725d7571d8c5e8efd4d6a7ee7bd8c59e257c6830e6e672c4e61f" name="plexus-interpolation-javadoc" arch="noarch">
  <version epoch="0" ver="1.27" rel="10.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.26-15" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-16" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-17" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-18" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-19" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27-1" date="1706788800">- Update to upstream version 1.27</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.27-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.27-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.27-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="967cd5f25445e1e945a38b2028b6c3a0006c0b2fb2053327db25335d528e441e" name="plexus-interpolation-javadoc" arch="noarch">
  <version epoch="0" ver="1.27" rel="10.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.26-15" date="1691668800">- Use implicit maven toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-16" date="1693569600">- Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.26-17" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-18" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.26-19" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27-1" date="1706788800">- Update to upstream version 1.27</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.27-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.27-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.27-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.27-9" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="12a453475a8cf381293a41f8f8ce08b3a33490c831efbd17a6e86df24adf5f84" name="plexus-io" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-7" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-10" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="4e229ea9461e48650b8c96e014dbfea47929d77ae25df56aaf2353e596d8dda2" name="plexus-io" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.4.1-1" date="1691755200">- Update to upstream version 3.4.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-1" date="1706788800">- Update to upstream version 3.4.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-1" date="1724414400">- Update to upstream version 3.5.0
- Resolves: rhbz#2295800</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="f98677f309fdcffaf7ac4335dd5189deba496e192bb86bfe222bcbe9b33d0d0c" name="plexus-io-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-7" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-10" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a38986b9f47c8e2d0bbd40c5773058b969287f13587899d042c3024e992b2c29" name="plexus-io-javadoc" arch="noarch">
  <version epoch="0" ver="3.2.0" rel="9.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.2.0-1" date="1571832000">- Update to upstream version 3.2.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-2" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.2.0-3" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-7" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.2.0-8" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.2.0-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="dc95bd9558d8996cad6c9f44ce9ce3c80a66a7258da753fb85af36d743e0f313" name="plexus-io-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 3.4.1-1" date="1691755200">- Update to upstream version 3.4.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.1-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-3" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-4" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.4.2-1" date="1706788800">- Update to upstream version 3.4.2</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.4.2-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-1" date="1724414400">- Update to upstream version 3.5.0
- Resolves: rhbz#2295800</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="752ea66cc03999451731bb0da506fc44adf880da65423edbfb24c024df141a39" name="plexus-languages" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.0.6-1" date="1611662400">- Update to upstream version 1.0.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.0.6-1" date="1612008000">- Update to version 1.0.6.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.6-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.6-3" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.6-4" date="1637150400">- Add patch for SUREFIRE-1897</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.6-5" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.0.6-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.1-1" date="1650801600">- Update to upstream version 1.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="3426cd5b1b668f406a4e0a221a8806f4ab7f50bffcb362b010a3951154a97e5e" name="plexus-languages" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-1" date="1692792000">- Update to upstream version 1.1.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.2.0-1" date="1702900800">- Update to upstream version 1.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-11" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="2ed08812e0acbd414a93acacd87872a3635b8d1c5bc403ff552b765d51f70025" name="plexus-languages-javadoc" arch="noarch">
  <version epoch="0" ver="1.0.6" rel="5.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.0.5-1" date="1596024000">- Update to upstream version 1.0.5</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.0.5-5" date="1597060800">- Bootstrap restoration of essential JPMS classes</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.0.5-6" date="1597060801">- Rebuild correctly as a proper JPMS module</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.0.6-1" date="1611662400">- Update to upstream version 1.0.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.0.6-1" date="1612008000">- Update to version 1.0.6.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.6-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.6-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.6-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.6-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="850be5a54e04bc087787a52f4bd67ee2e5a1e93a1173a9f51a0197e110a95180" name="plexus-languages-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.0.6-1" date="1611662400">- Update to upstream version 1.0.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.0.6-1" date="1612008000">- Update to version 1.0.6.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.6-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.6-3" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.0.6-4" date="1637150400">- Add patch for SUREFIRE-1897</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.6-5" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.0.6-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.1-1" date="1650801600">- Update to upstream version 1.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="441e72c20e54e915716bff5cf25fde6082d14ea3e5812dcb0496dd8913173c73" name="plexus-languages-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="12.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-1" date="1692792000">- Update to upstream version 1.1.2</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.2-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.2.0-1" date="1702900800">- Update to upstream version 1.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1706529600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2.0-5" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.2.0-6" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-11" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="f7647fe00d8b5c288f06f49fe45a0cbed657dd3417b47e5f5f93d971d7b72c11" name="plexus-pom" arch="noarch">
  <version epoch="0" ver="18" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 14-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 15-1" date="1702900800">- Update to upstream version 15</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 15-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 15-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 16-1" date="1706788800">- Update to upstream version 16</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 16-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 16-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 16-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 18-1" date="1724414400">- Update to upstream version 18
- Resolves: rhbz#2267817</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 18-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b0a92c6e7bc1dfe11a66fd8eb3b587aec7ed0e729a6d13d3765cc5a80c707395" name="plexus-pom" arch="noarch">
  <version epoch="0" ver="7" rel="5.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 6.4-2" date="1599825600">- Update to upstream version 6.4</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 6.5-1" date="1603540800">- Update to version 6.5.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.5-1" date="1607083200">- Update to upstream version 6.5</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7-1" date="1611662400">- Update to upstream version 7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.5-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 7-1" date="1612180800">- Update to version 7.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a85d3166b419f058c59d0aee6b4965702b34fa718e5fd063e2af358af43adf19" name="plexus-pom" arch="noarch">
  <version epoch="0" ver="8" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.5-1" date="1607083200">- Update to upstream version 6.5</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7-1" date="1611662400">- Update to upstream version 7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.5-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 7-1" date="1612180800">- Update to version 7.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7-3" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7-4" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7-5" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 8-1" date="1650801600">- Update to upstream version 8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="79fec759afaea6837518439383223977b951b15330f4ad4e23515390737b1178" name="plexus-resources" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-7" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-1" date="1650974400">- Update to upstream version 1.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="acf32316ccae8fdb56f0cc7fa7086edf26c238832e219956506039b54a854afd" name="plexus-resources" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="10.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-5" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-1" date="1706788800">- Update to upstream version 1.3.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="ca60dfb6b1689c7098c62d6745d1892123328cd248ed4ce38ffbe067343d4041" name="plexus-resources-javadoc" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="9.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.1.0-1" date="1566302400">- Update to version 1.1.0.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.0-2" date="1572955200">- Mass rebuild for javapackages-tools 201902</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.0-3" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.0-7" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.0-8" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4275bb671ab8b29ceb2dbc239514e7efb0772ff28c8b858c6b6004fe240c8a8e" name="plexus-resources-javadoc" arch="noarch">
  <version epoch="0" ver="1.2.0" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.1.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-7" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.1.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-1" date="1650974400">- Update to upstream version 1.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-2" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="65fda1b53a793d98adedef9a8db98646745790b35be7fb03b2d124c470dd1f06" name="plexus-resources-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="10.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-3" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-4" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2.0-5" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-6" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-1" date="1706788800">- Update to upstream version 1.3.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-4" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-8" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e60abcaa3145c5c2558dafc092aa9158f16abc93c8fb17b0228aeef8e6c711f4" name="plexus-sec-dispatcher" arch="noarch">
  <version epoch="0" ver="2.0" rel="28.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-6" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-12" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-14" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-26" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="0b0669ac75cd711e37b02e34fc8766dd9417bb6171d8a28a09d3ca8163a68397" name="plexus-sec-dispatcher" arch="noarch">
  <version epoch="0" ver="2.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-31" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-32" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.4-33" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-34" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 2.0-1" date="1634644800">- Update to version 2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-2" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-4" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="42a7e0be6f063279f51ea4c2548c4ca7b4356114aadf364c79f8c8146ff94227" name="plexus-sec-dispatcher-javadoc" arch="noarch">
  <version epoch="0" ver="1.4" rel="41.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.4-37" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4-38" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4-39" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4-40" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4-41" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="153cbbdc7c09e3d9ef43d82695c264659ef8c9f98ba6f466ebd5cb5f9ca6db97" name="plexus-sec-dispatcher-javadoc" arch="noarch">
  <version epoch="0" ver="2.0" rel="28.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-6" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-12" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-14" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-26" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="9c6e3815e1ed7c9f148e4441a9b7fd1aaef6739dcbd7be57b3b91dcc707d467c" name="plexus-sec-dispatcher-javadoc" arch="noarch">
  <version epoch="0" ver="2.0" rel="28.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-6" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-10" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-11" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-12" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-14" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-26" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e8473d4f45345a46c50a4f720dda0f7aa24eaf1f07cda00993d05c4dc235ff5b" name="plexus-sec-dispatcher-javadoc" arch="noarch">
  <version epoch="0" ver="2.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-31" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-32" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.4-33" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-34" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 2.0-1" date="1634644800">- Update to version 2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-2" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-4" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="97d2041ea4e73ce5949aae49fc08abda8cee0fee959329080a16c4962b81237c" name="plexus-sec-dispatcher-javadoc" arch="noarch">
  <version epoch="0" ver="2.0" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0-4" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="e8c39a8552af32b505e8dbd2bf230d8296858788af530357a0f754432dbb0d55" name="plexus-testing" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-1" date="1706875200">- Initial packaging</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="75ceec1db7ef676a06affb101106486e090f69d6e9c1666131fea2b5ae8dce9f" name="plexus-testing-javadoc" arch="noarch">
  <version epoch="0" ver="1.3.0" rel="8.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-1" date="1706875200">- Initial packaging</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-3" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.3.0-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="2739f95e567681b2821721504424e2cf8b83fde3bca11e260b614c52f9d0de87" name="plexus-utils" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-7" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-10" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="dc5730c87a297489ae45127e34f3833bdfca2ceef6ae4cd0ec9381e867ed8ed4" name="plexus-utils" arch="noarch">
  <version epoch="0" ver="3.5.1" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-1" date="1692273600">- Update to upstream version 3.5.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.1-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.1-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-16" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="82c5f0471f3b7a89a33b831cc413c3ecd1d4aa447ae52a11f23c13c2048ab28c" name="plexus-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-6" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-7" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-10" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="a14494f25f0482a010813b55c516083a52ae00bf26d5e7635eb34b12f0c1f883" name="plexus-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="11.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.3.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.3.0-10" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-11" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="a3c7efec230d7a15f6c0d8a9fb375f95d219eccc219b9ceb88aa7b49f27bc3ca" name="plexus-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="13.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.3.0-10" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.0-11" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.0-12" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.0-13" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="faaf3332e2baa46318c063f7cd41ef684292e36d521571b3add9e6bc0d4da11d" name="plexus-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.3.0" rel="14.el9_8"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.0-11" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.0-12" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 3.3.0-13" date="1732363201">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 3.3.0-14" date="1747742400">- Fix CVE-2025-67030: Directory Traversal in Expand.extractFile</changelog>
</package>
<package pkgid="b8c6e2a6aa2f0a0b7a536e9758a1252e0cfeb1528c1b436a34ba65364879f5f6" name="plexus-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.1" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-1" date="1692273600">- Update to upstream version 3.5.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.1-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.1-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-16" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="0f174140468a9f28c88a2eb621386f292cb414ae119eb947be06c36115075c11" name="plexus-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.1" rel="17.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.2-3" date="1689940800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-1" date="1692273600">- Update to upstream version 3.5.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.1-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.1-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-16" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="9e48b136db2bdda6d3bb82235bd3b84e8341a957b3ae7fd3bdbcd2681744e020" name="plexus-utils-javadoc" arch="noarch">
  <version epoch="0" ver="3.5.1" rel="17.module_el9.8.0+282+e62fc403.1"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-1" date="1692273600">- Update to upstream version 3.5.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-3" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.1-6" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.5.1-7" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.5.1-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.5.1-16" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Jacek Migacz &lt;jmigacz@redhat.com&gt; - 3.5.1-17.el9_8.1" date="1747742400">- Fix CVE-2025-67030: Directory Traversal in Expand.extractFile</changelog>
</package>
<package pkgid="fadaf30f249f2a32f2685d9279479be5e2b8a0981bfb4f304acee558cd192433" name="plexus-xml" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-1" date="1706875200">- Initial packaging</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-3" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-1" date="1724241600">- Update to upstream version 3.0.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="6732d3c9eda74baba30148104062a95466bc18a41547a744dc939a2696140475" name="plexus-xml-javadoc" arch="noarch">
  <version epoch="0" ver="3.0.1" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.0-1" date="1706875200">- Initial packaging</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 3.0.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-3" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-1" date="1724241600">- Update to upstream version 3.0.1</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 3.0.1-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="177c4024cdab8874e71c186b401d9bacf4541776641d2d74a75c13f25b4a3ab7" name="popt-static" arch="aarch64">
  <version epoch="0" ver="1.18" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-19" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 1.18~rc1-1" date="1590753600">- Rebase to popt 1.18-rc1
- Update URLs to the new upstream</changelog>
  <changelog author="Panu Matilainen &lt;pmatilai@redhat.com&gt; - 1.18-1" date="1593000000">- Update to popt 1.18 final (no changes from rc1)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.18-4" date="1615032000">- Conditionalize static subpackage during build-time</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.18-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.18-6" date="1626696000">- Address important covscan issues (#1938846)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 1.18-7" date="1626782400">- Add gating.yaml</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.18-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4ce0c2273b1f0de06f17b5cfd3539822ba53e5570eb98e22d71a180aa9efdf94" name="postgresql-jdbc-javadoc" arch="noarch">
  <version epoch="0" ver="42.2.28" rel="2.el9"/>
  <changelog author="Zuzana Miklankova &lt;zmiklank@redhat.com&gt; - 42.2.28-1" date="1709121600">- rebase to 42.2.28
- fix for CVE-2024-1597</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 42.2.28-2" date="1767960000">- Bundle shaded ongres-* dependencies</changelog>
</package>
<package pkgid="73f9d8f741f4295df399377d81cce2de7ba88125deabfaff5be20c2615f1e8a3" name="postgresql-jdbc-javadoc" arch="noarch">
  <version epoch="0" ver="42.2.28" rel="2.el9_8.2"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 42.2.28-2" date="1767960000">- Bundle shaded ongres-* dependencies</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 42.2.28-2.1" date="1778500800">- Fix CVE-2026-42198: limit SCRAM PBKDF2 iterations to prevent DoS
- Resolves: RHEL-173489</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 42.2.28-2.2" date="1779192000">- Add tests for CVE-2026-42198</changelog>
</package>
<package pkgid="3c641bb98b95f0d1ccc601ddeb975ac8dabea859714b11a41c658bfc38d26022" name="postgresql-odbc-tests" arch="aarch64">
  <version epoch="0" ver="12.02.0000" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.03.0000-5" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 12.01.0000-1" date="1583755200">- Rebase to upstream release 12.01.0000</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 12.02.0000-1" date="1591099200">- Rebase to upstream release 12.02.0000</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.02.0000-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.02.0000-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 12.02.0000-4" date="1612785600">- rebuild for libpq ABI fix rhbz#1908268</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 12.02.0000-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 12.02.0000-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b69bcd04fc57a263a4d9aa26a4a4bc31f87018e67e7528d5124601e683448256" name="potrace-devel" arch="aarch64">
  <version epoch="0" ver="1.16" rel="7.el9"/>
  <changelog author="Susi Lehtola &lt;jussilehtola@fedoraproject.org&gt; - 1.16-1" date="1569672000">- Update to 1.16.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.16-3" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.16-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.16-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8cf5b9f0c7bb07914583bb5a987887c30ab62411a13927179522dd4cb88b49d1" name="potrace-doc" arch="noarch">
  <version epoch="0" ver="1.16" rel="7.el9"/>
  <changelog author="Susi Lehtola &lt;jussilehtola@fedoraproject.org&gt; - 1.16-1" date="1569672000">- Update to 1.16.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 1.16-3" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-4" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.16-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.16-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f69a9a51b3f7172a84a6e9b8181618e51e6f4b0f49ef18f83f8214053c92b60f" name="power-profiles-daemon-docs" arch="noarch">
  <version epoch="0" ver="0.21" rel="1.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 0.11.1-1" date="1651492800">+ power-profiles-daemon-0.11.1-1
- Update to 0.11.1
- Resolves: rhbz#2080280</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.13-1" date="1694433600">- Update date to 0.13
- Support for AMD P-State
- Resolves: rhbz#2226568</changelog>
  <changelog author="Kate Hsuan &lt;hpa@redhat.com&gt; - 0.21-1" date="1713182400">- Update to 0.21
- Support multi-drivers mode and amdgpu
- Support dynamically adjusts amd-pstate EPP values between battery and AC modes.
- Resolves: RHEL-23395</changelog>
</package>
<package pkgid="9fa59bd5fc6b05ab5e7c7c6bba7d6e4f66dbaa827d6bbbc9d15bccfd852a9d24" name="pps-tools" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-5" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-6" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.2-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.2-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="43290187b013040588de7673d68c3d3648f7a32b6a02da99d38b95a3e49498ac" name="pptp-setup" arch="aarch64">
  <version epoch="0" ver="1.10.0" rel="14.el9"/>
  <changelog author="Paul Wouters &lt;pwouters@redhat.com&gt; - 1.10.0-8" date="1578744000">- fixup tmpfile to use /run instead of /var/run</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.0-9" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 1.10.0-10" date="1589457600">- Fixed man page and typo in the built-in help</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.0-11" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.0-12" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.10.0-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.10.0-14" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cbab8a29f481111105d3080c4758e98fc5578d602710e49959ac39d3f32a6c4d" name="pqrpm-sign" arch="aarch64">
  <version epoch="0" ver="4.19.1.1" rel="6.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-1" date="1754308800">- Initial commit on c9s (RHEL-84699)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-2" date="1755172800">- Add signing support (RHEL-107536)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-3" date="1756123200">- Additional PQC-related fixes (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-4" date="1756209600">- Fix rpmsign(8) man page (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-5" date="1770033600">- Ignore signatures made by unknown or disabled algorithms (RHEL-112700)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-6" date="1770292800">- Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112700)</changelog>
</package>
<package pkgid="519db7668b470dfea7912b3c32bfc7c4da1b9e55e1cf5b7cf0478c0510ca1ece" name="pqrpm-sign-libs" arch="aarch64">
  <version epoch="0" ver="4.19.1.1" rel="6.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-1" date="1754308800">- Initial commit on c9s (RHEL-84699)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-2" date="1755172800">- Add signing support (RHEL-107536)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-3" date="1756123200">- Additional PQC-related fixes (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-4" date="1756209600">- Fix rpmsign(8) man page (RHEL-109233)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-5" date="1770033600">- Ignore signatures made by unknown or disabled algorithms (RHEL-112700)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.19.1.1-6" date="1770292800">- Fix key import API to return NOTTRUSTED for disabled algorithms (RHEL-112700)</changelog>
</package>
<package pkgid="83d9c42a0744cdccc7eda37eb07e65a3700c83a33531effe54cebb9244c9e198" name="protobuf-emacs" arch="noarch">
  <version epoch="0" ver="3.14.0" rel="17.el9_7"/>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-14" date="1718625600">- Applied patch for CVE-2022-1941 (#RHEL-40872)
- Applied patch to make emacs dependency optional (#RHEL-40572)</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-15" date="1718625601">- Rebuild</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-16" date="1729598400">- Rebuild</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-17" date="1769428800">- Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits</changelog>
</package>
<package pkgid="c2fbc3d34c7fef284e3fc313a38a2b4785fb24e0d63248b1d84f8f48bdbb1511" name="protobuf-lite-static" arch="aarch64">
  <version epoch="0" ver="3.14.0" rel="17.el9_7"/>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-14" date="1718625600">- Applied patch for CVE-2022-1941 (#RHEL-40872)
- Applied patch to make emacs dependency optional (#RHEL-40572)</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-15" date="1718625601">- Rebuild</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-16" date="1729598400">- Rebuild</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-17" date="1769428800">- Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits</changelog>
</package>
<package pkgid="3c5a16dc28b4ad50bd2b873cf6185626f50054dd209145e63b5cb93411db25e5" name="protobuf-static" arch="aarch64">
  <version epoch="0" ver="3.14.0" rel="17.el9_7"/>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-14" date="1718625600">- Applied patch for CVE-2022-1941 (#RHEL-40872)
- Applied patch to make emacs dependency optional (#RHEL-40572)</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-15" date="1718625601">- Rebuild</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-16" date="1729598400">- Rebuild</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-17" date="1769428800">- Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits</changelog>
</package>
<package pkgid="2d18556d897430829ff68de130498f0e4a2939ae36eeeb6abbb2d656613695bd" name="protobuf-vim" arch="noarch">
  <version epoch="0" ver="3.14.0" rel="17.el9_7"/>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-14" date="1718625600">- Applied patch for CVE-2022-1941 (#RHEL-40872)
- Applied patch to make emacs dependency optional (#RHEL-40572)</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-15" date="1718625601">- Rebuild</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-16" date="1729598400">- Rebuild</changelog>
  <changelog author="Adrian Reber &lt;areber@redhat.com&gt; - 3.14.0-17" date="1769428800">- Fix CVE-2026-0994: nested Any messages bypassing recursion depth limits</changelog>
</package>
<package pkgid="4c89846a3573b1788089f962a5ac92a435cf01589c5f2d197361376a06840fbd" name="psl" arch="aarch64">
  <version epoch="0" ver="0.21.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.0-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.0-4" date="1580385600">- fix unnecessary build failure due to missing tree_index.sgml in gtk-doc output</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.1-1" date="1595246400">- update to 0.21.1 (#1858489)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ca739ee27b315933e353e697c0145caca62993f5f6a36b676a50590b57cf8e7b" name="psl-make-dafsa" arch="aarch64">
  <version epoch="0" ver="0.21.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.0-3" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.0-4" date="1580385600">- fix unnecessary build failure due to missing tree_index.sgml in gtk-doc output</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 0.21.1-1" date="1595246400">- update to 0.21.1 (#1858489)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-2" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.1-3" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.21.1-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2f50e1cc467baf088e71a667f0bd5975293a41f51bb5eec2fb00a2b5ed7c7645" name="pstoedit-devel" arch="aarch64">
  <version epoch="0" ver="3.75" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.73-6" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.73-7" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.73-8" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Antonio Trande &lt;sagitter@fedoraproject.org&gt; - 3.75-1" date="1601899200">- Rebase to 3.75</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.75-2" date="1610020800">- Disable ImageMagick support in ELN/RHEL 8+ as ImageMagick isn't part of it</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.75-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.75-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.75-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e4b62c5f61bc4492d72bd05780b2404e63172c6a15018224e5c56321f6196805" name="pt-sans-fonts-doc" arch="noarch">
  <version epoch="0" ver="20141121" rel="23.el9"/>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1585828800">- 20141121-14
👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1585828801">- 20141121-15
💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
  valid</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1587988800">- 20141121-16
🐞 Workaround Fedora problems created by rpm commit 93604e2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt;" date="1599825600">- 20141121-18
- Fix this spec file to build for F33+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20141121-19" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20141121-21" date="1621684800">- Resolves:rhbz#1962000 - Add gating tests from rhel-8</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 20141121-22" date="1621684801">- Resolves:rhbz#1962000 - Add missing gating tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6d8971f3d14941271db684ba5f9942d82812bcf6f024f68d467e8076e9444c08" name="pulseaudio-module-gsettings" arch="aarch64">
  <version epoch="0" ver="15.0" rel="3.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 15.0-3" date="1733227200">- Rebuild for autostart fix
  Resolves: RHEL-40601</changelog>
</package>
<package pkgid="1e18cf76754feda1181e8a4d90f75f417d54cc8784de4a9088d75fb1bae47a46" name="pulseaudio-module-zeroconf" arch="aarch64">
  <version epoch="0" ver="15.0" rel="3.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 15.0-3" date="1733227200">- Rebuild for autostart fix
  Resolves: RHEL-40601</changelog>
</package>
<package pkgid="752e56edddcdec55690cda74d8360adee4ceb611afd548029837a380a2d9ec55" name="pulseaudio-qpaeq" arch="aarch64">
  <version epoch="0" ver="15.0" rel="3.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 15.0-3" date="1733227200">- Rebuild for autostart fix
  Resolves: RHEL-40601</changelog>
</package>
<package pkgid="27b343b404d4bbd39dbc00255085f96ee0d0d4709d9e0e02c908973b57b52822" name="pycdlib-tools" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="5.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.8.0-3" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Chris Lalancette &lt;clalancette@gmail.com&gt; - 1.9.0-1" date="1576843200">- Update to upstream version 1.9.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.0-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.9.0-3" date="1590408000">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.0-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Chris Lalancette &lt;clalancette@gmail.com&gt; - 1.11.0-1" date="1602072000">- Update to upstream 1.11.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.0-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 1.11.0-4" date="1623758400">- Disable tests that use genisoimage
  Resolves: rhbz#1972212</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11.0-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7153a4901ec5c97f3d7692347c314f790ab4ffd6c0e3a10f2f7b4733d312e3d3" name="python-breathe-doc" arch="noarch">
  <version epoch="0" ver="4.27.0" rel="5.el9"/>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dan.cermak@cgc-instruments.com&gt; - 4.24.0-1" date="1605528000">- New upstream release 4.24.0 (rhbz#1897984)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dan.cermak@cgc-instruments.com&gt; - 4.24.1-1" date="1607342400">- New upstream release 4.24.1 (rhbz#1903366)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dan.cermak@cgc-instruments.com&gt; - 4.25.1-1" date="1608465600">- New upstream release 4.25.1 (rhbz#1908213)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 4.26.0-1" date="1610625600">- New upstream release 4.26.0 (rhbz#1914147)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.26.0-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 4.27.0-1" date="1613476800">- New upstream release 4.27.0 (rhbz#1918566, rhbz#1929448)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 4.27.0-2" date="1615377600">- Fix an IndexError when generating toctree (rhbz#1930910)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.27.0-5" date="1631534400">- fix building docs</changelog>
</package>
<package pkgid="4cc33b61c6fe4255a16ef5b4dcbc783a881e20335f84e541ff48450b5c99724b" name="python-cffi-doc" arch="noarch">
  <version epoch="0" ver="1.14.5" rel="5.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.14.0-2" date="1590235200">- Rebuilt for Python 3.9</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.14.1-1" date="1597406400">- Update to 1.14.1
- Fixes: rhbz#1860698
- Fixes: rhbz#1865276</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.14.2-1" date="1599566400">- Update to 1.14.2 (#1869032)</changelog>
  <changelog author="Joel Capitao &lt;jcapitao@redhat.com&gt; - 1.14.3-1" date="1605787200">- Update to 1.14.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.14.3-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 1.14.5-1" date="1613131200">- Update to 1.14.5
Resolves: rhbz#1927933</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.5-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.14.5-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 1.14.5-4" date="1629374400">- Rebuilt for libffi 3.4.2 SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="Tomas Orsava &lt;torsava@redhat.com&gt; - 1.14.5-5" date="1644321600">- Add automatically generated Obsoletes tag with the python39- prefix
  for smoother upgrade from RHEL8
- Related: rhbz#1990421</changelog>
</package>
<package pkgid="6c708c3f1564500be360da5fd062b483a740882b9b9b69607b70f310f6bdce40" name="python-libcomps-doc" arch="noarch">
  <version epoch="0" ver="0.1.18" rel="1.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.1.15-2" date="1590148800">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Nicola Sella &lt;nsella@redhat.com&gt; - 0.1.15-5" date="1596801600">- spec: Fix building with new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.1.15-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.15-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-1" date="1619524800">- Update to 0.1.16
- Fix a crash when clearing COMPS_ObjRTree (RhBug:1888343)
- Fix memory leaks and resource leaks</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.1.16-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.16-4" date="1629115200">- Fix issues detected by static analyzers</changelog>
  <changelog author="Pavla Kratochvilova &lt;pkratoch@redhat.com&gt; - 0.1.18-1" date="1635163200">- Update to 0.1.18
- Don't print empty requires
- Remove Python 2 support</changelog>
</package>
<package pkgid="e5322b3b8e55cb3b05a63a524480b4f71900e99cfb0e6d861c2d3da589978732" name="python-mako-doc" arch="noarch">
  <version epoch="0" ver="1.1.4" rel="6.el9"/>
  <changelog author="Petr Viktorin &lt;pviktori@redhat.com&gt; - 1.1.4-1" date="1610650531">- Update to version 1.1.4
- Avoids test warnings on Python 3.10
  Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1907474</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.4-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.1.4-3" date="1617019200">- Remove unnecessary python3-mock BuildRequires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.4-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.4-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.1.4-6" date="1668686400">- Fix CVE-2022-40023 (#2133606)</changelog>
</package>
<package pkgid="11f4447f3a304e7465e0883a40cc8f1dc2921f90bcdb65016fe1cd69ba55a975" name="python-psycopg2-doc" arch="aarch64">
  <version epoch="0" ver="2.8.6" rel="6.el9"/>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 2.8.5-1" date="1587470400">- Rebase to upstream version 2.8.5</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.8.5-2" date="1590235200">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 2.8.6-1" date="1600344000">- Rebase to upstream version 2.8.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.6-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.8.6-3" date="1612785600">- rebuild for libpq ABI fix rhbz#1908268</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.6-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.6-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 2.8.6-6" date="1644321600">- Add automatically generated Obsoletes tag with the python39- prefix
  for smoother upgrade from RHEL8
- Add manual Obsoletes for python39-psycopg2-doc
- Related: rhbz#1990421</changelog>
</package>
<package pkgid="1a191e90687d4df80209097bd123236e76c6e24345c2bb0683ba24bf9347c46e" name="python-pyasn1-doc" arch="noarch">
  <version epoch="0" ver="0.4.8" rel="7.el9_7"/>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 0.4.8-7" date="1770984000">- Resolves: RHEL-148154</changelog>
</package>
<package pkgid="1ad2e2ae110bc54e6ea1e0054d070383939afdffb835884a948cef5f8978b4f3" name="python-pyasn1-doc" arch="noarch">
  <version epoch="0" ver="0.4.8" rel="7.el9_8.1"/>
  <changelog author="Florence Blanc-Renaud &lt;flo@redhat.com&gt; - 0.4.8-7" date="1770984000">- Resolves: RHEL-148154</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 0.4.8-7.1" date="1785326400">- Fix CVE-2026-59886: prevent overflow in Real type float conversion
- Resolves: RHEL-217915</changelog>
</package>
<package pkgid="970269048524d3e6d69d733e75de5d89f617f12384bb2cbc4bd30cd3b367b1d5" name="python-pyrsistent-doc" arch="noarch">
  <version epoch="0" ver="0.17.3" rel="8.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.16.0-2" date="1590321600">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.16.0-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Lemos Neto &lt;LemosJoseX@protonmail.com&gt; - 0.17.3-1" date="1601208000">- update to version 0.17.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17.3-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.17.3-3" date="1613649600">- Replace pypi_name macro with srcname
- Update BR’s
- Run the doctests
- Build documentation in a new -doc subpackage</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.17.3-4" date="1613736000">- Use the GitHub tarball instead of the PyPI tarball
- Switch URL to HTTPS</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.17.3-5" date="1613736001">- Parallelize Sphinx documentation build</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.17.3-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.17.3-7" date="1623672000">- Don't BuildRequire python3-hypothesis and exclude affected tests from %check
- Resolves: rhbz#1928125</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.17.3-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="76ff20021e665f01244ca689cd36feef201e1b1c1bddc03765b030e518e587b3" name="python-qt5-doc" arch="noarch">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.0-10" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.0-11" date="1649246400">- Rebuild (Qt 5.15.3)
  Resolves: bz#2061728</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.6-1" date="1651579200">- 5.15.6 + sync with Fedora
  Resolves: bz#2061728</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175758</changelog>
</package>
<package pkgid="a9fb9ef7e5b95471d363ba21789a2abe53684c476f9c64f633ffb53a3de18a95" name="python-rjsmin-docs" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="5.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.0.12-16" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.0.12-17" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.12-18" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.0.12-19" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.12-20" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Yatin Karel &lt;ykarel@redhat.com&gt; - 1.1.0-1" date="1599566400">- Update to 1.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.1.0-4" date="1620648000">- Remove benchmarking files from sources</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="76304b9999c1687a97be606f860a903d972973809c1fd1f7ddb0d43b1739c5b6" name="python-sqlalchemy-doc" arch="noarch">
  <version epoch="0" ver="1.4.45" rel="3.el9"/>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.29-1" date="1640260800">- version 1.4.29</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.31-1" date="1642766400">- version 1.4.31</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.32-1" date="1646740800">- version 1.4.32
- don't BR: python3-pytest-xdist on EL9
- remove obsolete (no-op) tweak of setup.cfg</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.34-1" date="1648814400">- version 1.4.34</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.35-1" date="1649332800">- version 1.4.35</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.36-1" date="1651060800">- version 1.4.36</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.37-1" date="1654084800">- version 1.4.37</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.37-2" date="1655467200">- Add python-sqlalchemy to RHEL-9
  Resolves: rhbz#2084556</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.37-3" date="1655553600">- Remove obsolete cruft from the specfile, follow the packaging guidelines
- Remove also extra packages we have no runtime dependencies for
  Related: rhbz#2084556</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.45-3" date="1670932800">- Update to current version - 1.4.45
  Resolves: rhbz#2152649</changelog>
</package>
<package pkgid="46d76f24566f44bea4ec2e21579dad56948f4e7e35b3f99ebb2db586a7087b2d" name="python-systemd-doc" arch="aarch64">
  <version epoch="0" ver="234" rel="19.el9"/>
  <changelog author="Jan Macku &lt;jamacku@redhat.com&gt; - 234-19" date="1718020800">- Remove weak dependency on doc subpackage (RHEL-5835)</changelog>
</package>
<package pkgid="2df74b1c46086fa80d1d49972fced0848d8cb4f502559c697989a4c2f449136f" name="python-tornado-doc" arch="aarch64">
  <version epoch="0" ver="6.5.5" rel="1.el9_8"/>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 6.4.2-1" date="1733400000">- Update to 6.4.2
  Resolves: RHEL-68667</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 6.4.2-2" date="1733400001">- Bump release to prevent clash with 9.5.z NVR
  Resolves: RHEL-68667</changelog>
  <changelog author="Anderson Toshiyuki Sasaki &lt;ansasaki@redhat.com&gt; - 6.4.2-3" date="1750161600">- httputil: Raise errors instead of logging in  multipart/form-data parsing
  Resolves: RHEL-91998</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 6.5.5-1" date="1775563200">- Update to 6.5.5
  Resolves: RHEL-160942</changelog>
</package>
<package pkgid="f31cfe3bf457a6cd343f17163658e697b8f01d2a077828517f2f9fa4f224f803" name="python3-argparse-manpage" arch="noarch">
  <version epoch="0" ver="1.5" rel="4.el9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.2.2-1" date="1567857600">- new release</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.3-1" date="1578398400">- new release</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.4-1" date="1579867200">- new release to fix testsuite against Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-2" date="1580212800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.4-3" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4-4" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.5-1" date="1607947200">- new release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5-3" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="99d5295f97c6c60f94a8088d8f8051de86e7616bb1ce344741c26c2c622625ed" name="python3-botocore" arch="noarch">
  <version epoch="0" ver="1.31.62" rel="1.el9"/>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.31.32-1" date="1692792000">- 1.31.32</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.31.33-1" date="1692792001">- 1.31.33</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.31.34-1" date="1692878400">- 1.31.34</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.31.35-1" date="1692964800">- 1.31.35</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.31.36-1" date="1693224000">- 1.31.36</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.31.37-1" date="1693396800">- 1.31.37</changelog>
  <changelog author="Gwyn Ciesla &lt;gwync@protonmail.com&gt; - 1.31.38-1" date="1693396801">- 1.31.38</changelog>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 1.31.38-2" date="1693569600">- Add gating configuration</changelog>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 1.31.38-3" date="1693569601">- Skip two tests that exceed the min/max epoch time on RHEL</changelog>
  <changelog author="Major Hayden &lt;major@redhat.com&gt; - 1.31.62-1" date="1696939200">- Update to 1.31.62</changelog>
</package>
<package pkgid="d39b8ea09364108a154137773a8c839d91c376f2470985b3419aa2e63fd36dc3" name="python3-breathe" arch="noarch">
  <version epoch="0" ver="4.27.0" rel="5.el9"/>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dan.cermak@cgc-instruments.com&gt; - 4.24.0-1" date="1605528000">- New upstream release 4.24.0 (rhbz#1897984)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dan.cermak@cgc-instruments.com&gt; - 4.24.1-1" date="1607342400">- New upstream release 4.24.1 (rhbz#1903366)</changelog>
  <changelog author="Dan &#x10C;erm&#xE1;k &lt;dan.cermak@cgc-instruments.com&gt; - 4.25.1-1" date="1608465600">- New upstream release 4.25.1 (rhbz#1908213)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 4.26.0-1" date="1610625600">- New upstream release 4.26.0 (rhbz#1914147)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.26.0-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 4.27.0-1" date="1613476800">- New upstream release 4.27.0 (rhbz#1918566, rhbz#1929448)</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 4.27.0-2" date="1615377600">- Fix an IndexError when generating toctree (rhbz#1930910)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.27.0-5" date="1631534400">- fix building docs</changelog>
</package>
<package pkgid="0b62854cf84b1e55e2f68ee8f012430613258534f8d9aaaccabe47e368cdceb9" name="python3-ceph-argparse" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="59eceb8269a0befc9a5938ceeb5459bab07ceeb26546e3050338d486ea226026" name="python3-ceph-common" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7178ab4308e19407e38064bd7c2a91ef94c3fff20b5f72994cde75368f177e55" name="python3-cephfs" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4d0e5c03b1ede78f62e4ef63ec7bbad6ce350f491b32e24618ba6788e7d75ee6" name="python3-coverage+toml" arch="aarch64">
  <version epoch="0" ver="6.2" rel="1.el9"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.2.1-1" date="1597320000">- update to 5.2.1</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.3-1" date="1600084800">- update to 5.3</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.3.1-1" date="1609329600">- update to 5.3.1</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.4-1" date="1611662400">- update to 5.4</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.5-1" date="1614600000">- update to 5.5</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.6-0.1.b1" date="1618401600">- 5.6b1</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 5.6-0.2b1" date="1622635200">- Rebuilt for Python 3.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.6-0.3b1" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 5.6-0.4b1" date="1633348800">- Provide the extra toml package (rhbz#2010422)</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 6.2-1" date="1638705600">- Update to 6.2</changelog>
</package>
<package pkgid="f2715d1ddb4948a32b498f43ed32ed8002f277f50b32a602a8840196a869721d" name="python3-coverage" arch="aarch64">
  <version epoch="0" ver="6.2" rel="1.el9"/>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.2.1-1" date="1597320000">- update to 5.2.1</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.3-1" date="1600084800">- update to 5.3</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.3.1-1" date="1609329600">- update to 5.3.1</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.4-1" date="1611662400">- update to 5.4</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.5-1" date="1614600000">- update to 5.5</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 5.6-0.1.b1" date="1618401600">- 5.6b1</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 5.6-0.2b1" date="1622635200">- Rebuilt for Python 3.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.6-0.3b1" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 5.6-0.4b1" date="1633348800">- Provide the extra toml package (rhbz#2010422)</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 6.2-1" date="1638705600">- Update to 6.2</changelog>
</package>
<package pkgid="14809de6046fb2c98cc03e18e6871f27a31193e324993a1bd2a3b824a69d7e97" name="python3-dbusmock" arch="noarch">
  <version epoch="0" ver="0.22.0" rel="5.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 0.18.3-2" date="1573819200">+ python-dbusmock-0.18.3-2
- Add low-memory-monitor mock</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.3-3" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.18.3-4" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.3-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.3-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 0.22.0-1" date="1613131200">+ python-dbusmock-0.22.0-1
- Update to 0.22.0
- Disable tests</changelog>
  <changelog author="Charalampos Stratakis &lt;cstratak@redhat.com&gt; - 0.22.0-2" date="1614600000">- Remove redundant dependency on python3-nose</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 0.22.0-3" date="1616414400">+ python-dbusmock-0.22.0-3
- Add bluez agent templates for the benefit of gnome-bluetooth</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.22.0-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.22.0-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="63dd068eb02200d754a34b8c4d04f6d3679fef8375fe22d3ab3cd644415cc84f" name="python3-ddt" arch="noarch">
  <version epoch="0" ver="1.4.4" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.1-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.4.1-3" date="1607428800">- BuildRequire six explicitly, it's used in tests</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.1-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Carl George &lt;carl@george.computer&gt; - 1.4.1-5" date="1612526400">- Fix FTBFS with PyYAML 5.4.1 rhbz#1917364</changelog>
  <changelog author="Joel Capitao &lt;jcapitao@redhat.com&gt; - 1.4.2-1" date="1619006400">- Latest upstream rhbz#1938360</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.4.2-2" date="1622808000">- Rebuilt for Python 3.10</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 1.4.2-3" date="1623326400">- Fix missing %dist</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.2-4" date="1627387200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.2-5" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Carl George &lt;carl@george.computer&gt; - 1.4.4-1" date="1650542400">- Latest upstream, resolves: rhbz#1938360
- Convert to pyproject macros</changelog>
</package>
<package pkgid="e6cd2f6a4442c78d1166871a22a17c0cf01aa12370072f4a16a1bb377bc8bc57" name="python3-dmidecode" arch="aarch64">
  <version epoch="0" ver="3.12.3" rel="2.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.12.2-24" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 3.12.2-25" date="1626696000">- Fix several issues found by covscan
- Resolves: rhbz#1938852</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.12.2-26" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Coiby Xu &lt;coxu@redhat.com&gt; - 3.12.2-27" date="1628942400">- Resolves: rhbz#1938852
- Resolves: rhbz#1992494
  Related: rhbz#1991688</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 3.12.3-1" date="1669204800">- Update to 3.12.3
- Add smbios3 support.</changelog>
  <changelog author="Lichen Liu &lt;lichliu@redhat.com&gt; - 3.12.3-2" date="1675771200">- Resolves: rhbz#1981868
- Resolves: rhbz#2166716</changelog>
</package>
<package pkgid="fa82ea4e8ab19afb4aaa0c2b3f89d88faa140764df78d4a42e0ac4796f8cc8cd" name="python3-dns+dnssec" arch="noarch">
  <version epoch="0" ver="2.6.1" rel="3.el9"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.2.1-1" date="1673006400">- Rebase to version 2.2.1
  Resolves: rhbz#2088661
- Disable DNSSEC tests using SHA1 due to crypto policies
  Resolves: rhbz#2107651</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.2.1-2" date="1673092800">- Remove pycache from patch 0003.
  Related: rhbz#2107651</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.3.0-1" date="1684324800">- Rebase to version 2.3.0
  Resolves: rhbz#2177854</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.3.0-2" date="1687780800">- Fix build for legacy setup.py
  Related: rhbz#2177854</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.6.1-1" date="1723809600">- Rebase to 2.6.1
  Resolves: RHEL-32628, RHEL-32663</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.6.1-2" date="1724068800">- Add missing files due to build change from hatchling to setuptools
  Related: RHEL-32663</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.6.1-3" date="1724155200">- Ensure dns.rdtypes subpackages are available
  Related: RHEL-32663</changelog>
</package>
<package pkgid="f6803dcb53d873812d41052eef940520531d4ec6530156195946d1af81133f29" name="python3-dns+idna" arch="noarch">
  <version epoch="0" ver="2.6.1" rel="3.el9"/>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.2.1-1" date="1673006400">- Rebase to version 2.2.1
  Resolves: rhbz#2088661
- Disable DNSSEC tests using SHA1 due to crypto policies
  Resolves: rhbz#2107651</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.2.1-2" date="1673092800">- Remove pycache from patch 0003.
  Related: rhbz#2107651</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.3.0-1" date="1684324800">- Rebase to version 2.3.0
  Resolves: rhbz#2177854</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.3.0-2" date="1687780800">- Fix build for legacy setup.py
  Related: rhbz#2177854</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.6.1-1" date="1723809600">- Rebase to 2.6.1
  Resolves: RHEL-32628, RHEL-32663</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.6.1-2" date="1724068800">- Add missing files due to build change from hatchling to setuptools
  Related: RHEL-32663</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.6.1-3" date="1724155200">- Ensure dns.rdtypes subpackages are available
  Related: RHEL-32663</changelog>
</package>
<package pkgid="835d0dffa19288698b6b645ece48898053b48f86dd9e454067d5772db43a8be2" name="python3-fonttools+ufo" arch="noarch">
  <version epoch="0" ver="4.19.1" rel="3.el9"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.17.0-1" date="1605269619">- Update to 4.17.0 version (#1897467)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.17.1-1" date="1605948537">- Update to 4.17.1 version (#1898343)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.0-1" date="1607159603">- Update to 4.18.0 version (#1904631)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.1-1" date="1607712471">- Update to 4.18.1 version (#1906095)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.2-1" date="1608298623">- Update to 4.18.2 version (#1908485)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.18.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.19.0-1" date="1611741736">- Update to 4.19.0 version (#1920265)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.19.1-1" date="1612276369">- Update to 4.19.1 version (#1921968)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.19.1-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.19.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="397f3bd055f44e4e31258299adc63b741cdbdc91095c6d1c0950171fb24f760a" name="python3-fonttools+unicode" arch="noarch">
  <version epoch="0" ver="4.19.1" rel="3.el9"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.17.0-1" date="1605269619">- Update to 4.17.0 version (#1897467)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.17.1-1" date="1605948537">- Update to 4.17.1 version (#1898343)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.0-1" date="1607159603">- Update to 4.18.0 version (#1904631)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.1-1" date="1607712471">- Update to 4.18.1 version (#1906095)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.2-1" date="1608298623">- Update to 4.18.2 version (#1908485)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.18.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.19.0-1" date="1611741736">- Update to 4.19.0 version (#1920265)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.19.1-1" date="1612276369">- Update to 4.19.1 version (#1921968)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.19.1-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.19.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="80df7bcf174d64cc67fc9696b007cf9f0408d5939afa7556d294e4f1bb30fa5a" name="python3-fonttools" arch="noarch">
  <version epoch="0" ver="4.19.1" rel="3.el9"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.17.0-1" date="1605269619">- Update to 4.17.0 version (#1897467)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.17.1-1" date="1605948537">- Update to 4.17.1 version (#1898343)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.0-1" date="1607159603">- Update to 4.18.0 version (#1904631)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.1-1" date="1607712471">- Update to 4.18.1 version (#1906095)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.18.2-1" date="1608298623">- Update to 4.18.2 version (#1908485)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.18.2-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.19.0-1" date="1611741736">- Update to 4.19.0 version (#1920265)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 4.19.1-1" date="1612276369">- Update to 4.19.1 version (#1921968)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.19.1-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.19.1-3" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f5f00f92224d0f3bf153fe28f8c65b8926a76fdac5e6fb5e70d5e65e626d4eda" name="python3-fs" arch="noarch">
  <version epoch="0" ver="2.4.11" rel="10.el9"/>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.4.11-1" date="1585569600">- Initial packaging</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.4.11-2" date="1585569601">- enable tests and use upstream source tarball</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.4.11-3" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.4.11-4" date="1591012800">- Disable few tests temporary for now (rhbz#1820916, rhbz#1841708)</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.4.11-5" date="1593000000">- Add missing BR: python3-setuptools</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.11-6" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4.11-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.11-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 2.4.11-9" date="1619524800">- Resolves: rhbz#1945164 - Remove dependency on python-pytest-randomly
- disable tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4.11-10" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8c72b21d41a4fd5fa44d158a6989954ff7b5a54433e41f2a79f142b011396088" name="python3-gexiv2" arch="aarch64">
  <version epoch="0" ver="0.14.3" rel="1.el9"/>
  <changelog author="Josef Ridky &lt;jridky@redhat.com&gt; - 0.14.3-1" date="1745582400">- Rebase to the latest upstream 0.14.3 (RHEL-88597)</changelog>
</package>
<package pkgid="6f7696720a54ae368c789513d53cce1112efc335baa85bf55776e5dd54b06515" name="python3-httpretty" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.7-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.0.2-1" date="1585310400">- 1.0.2</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.0.2-2" date="1590321600">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.0.2-4" date="1602590400">- Temporarily run tests on Fedora &lt; 34 only</changelog>
  <changelog author="Jiri Popelka &lt;jpopelka@redhat.com&gt; - 1.0.5-1" date="1609934400">- 1.0.5
- Enable tests for F34 (#1896191 has been resolved)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.5-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Miroslav Rezanina &lt;mrezanin@redhat.com&gt; 1.0.5-3" date="1618228800">- Removing tests
- Resolves: rhbz#1918839
- Resolves: rhbz#1945223
- Resolves: rhbz#1922337</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.5-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.5-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ffb3ff79ec3c9fb8cb7eee8e1bd54568ae5bc0bb6b3236f02f9cd517a4b715c4" name="python3-isomd5sum" arch="aarch64">
  <version epoch="1" ver="1.2.3" rel="14.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1:1.2.3-7" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-8" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1:1.2.3-9" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-10" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 1.2.3-11" date="1606824000">- Add make to BuildRequires</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:1.2.3-12" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.2.3-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:1.2.3-14" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8c46b88127d94c38773ae318a21fbfe33584dc1587f99663df1f9ac4fadc1fc3" name="python3-javapackages" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="4.module_el9.2.0+25+b1421c1d.alma"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.0.0-6" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-7" date="1643284800">- Switch to OpenJDK 17 as default JDK/JRE</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-8" date="1651752000">- Install toolchains.xml in correct location in bootstrap mode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 6.0.0-9" date="1655121600">- Rebuilt for Python 3.11</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.0.0-10" date="1655208000">- Introduce javapackages-extra and javapackages-common subpackages
- Drop metadata for com.sun:tools and sun.jdk:jconsole
- Re-enable tests
- Re-add manpages
- Drop bootstrap mode</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-1" date="1655985600">- Update to upstream version 6.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.1.0-2" date="1657281600">- Rebuilt for Drop i686 JDKs</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.1.0-3" date="1658145600">- Drop ExclusiveArch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1.0-4" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 6.1.0-4.alma" date="1681128000">- Add generated Requires on multiple versions of java-headless</changelog>
</package>
<package pkgid="59fdb592e3b23363f65fdd9a8e08f8e1f2183b27212e9514a4e6023a8acaf32e" name="python3-javapackages" arch="noarch">
  <version epoch="0" ver="6.4.0" rel="4.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.2-1" date="1728043200">- Update to upstream version 6.3.2
- Resolves: rhbz#2316487</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.3-1" date="1728302400">- Update to upstream version 6.3.3
- Resolves: rhbz#2317032</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-1" date="1728561600">- Update to upstream version 6.3.4
- Resolves: rhbz#2317773</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-2" date="1730289600">- jp-local-openjdk21 should conditionally require ant-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-3" date="1731931200">- Ensure that maven-openjdk21 is used with maven-local-openjdk21</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.3.4-4" date="1732104000">- Revert "Ensure that maven-openjdk21 is used with maven-local-openjdk21"</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-1" date="1732276800">- Update to upstream version 6.4.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-2" date="1732363200">- Add maven-local dependency on xmvn-toolchain</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-3" date="1732449600">- Drop JRE 21 fallback patch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 6.4.0-4" date="1732449601">- Drop JRE 21 fallback patch</changelog>
</package>
<package pkgid="679a326392c57acd6db6de56ed3b1b6ef361ece5043e6647e208845d0fa28aa0" name="python3-libiptcdata" arch="aarch64">
  <version epoch="0" ver="1.0.5" rel="10.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 1.0.5-10" date="1720526400">- Rebuild to get -devel in compose
- Resolves: RHEL-45353</changelog>
</package>
<package pkgid="0587854471c34c1ad983414338dda0a1c335d5db1c026d8e0b14c9a4315f8094" name="python3-libkdumpfile" arch="aarch64">
  <version epoch="0" ver="0.5.5" rel="1.el9"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 0.5.1-3" date="1686657600">- Rebuilt for Python 3.12</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.1-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Michel Alexandre Salim &lt;salimma@fedoraproject.org&gt; - 0.5.2-1" date="1690372800">- Update to 0.5.2
- Use SPDX license identifiers
- Fix documentation build to be properly be noarch</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.2-3" date="1714737600">- Add gating.yaml to RHEL9 libkdumpfile</changelog>
  <changelog author="Tao Liu &lt;ltao@redhat.com&gt; - 0.5.2-4" date="1715774400">- Add tests/ directory</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.4-1" date="1731412800">- Rebase to upstream v0.5.4
  Resolves: RHEL-67143</changelog>
  <changelog author="Philipp Rudo &lt;prudo@redhat.com&gt; - 0.5.5-1" date="1747396800">- Rebase to upstream v0.5.5
  Resolves: RHEL-86262</changelog>
</package>
<package pkgid="50798352d876b7b459e8ac1f4e2a0e785cecfee161e06ca206d1338f494e3858" name="python3-libpamtest" arch="aarch64">
  <version epoch="0" ver="1.1.4" rel="2.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.1.3-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.3-5" date="1596628800">- Build using new cmake macros</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.3-6" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-8" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 1.1.4-1" date="1650542400">- related: rhbz#2028819 - Update to version 1.1.4</changelog>
  <changelog author="Norbert Pocs &lt;npocs@redhat.com&gt; - 1.1.4-2" date="1651579200">- related: rhbz#2048653 - Add package to CRB</changelog>
</package>
<package pkgid="0a395cef02344c66dbf56662e65cdd958f07cc82c401b8b25aa289db6a06f8b9" name="python3-libpst" arch="aarch64">
  <version epoch="0" ver="0.6.75" rel="12.el9"/>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.6.75-3" date="1590753600">- Rebuilt for Boost 1.73</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0.6.75-4" date="1594900800">- Cleanup conditionals for using python3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.75-5" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0.6.75-6" date="1595937601">- FTBFS fix: %{__python} must now be explicitly defined</changelog>
  <changelog author="Jonathan Wakely &lt;jwakely@redhat.com&gt; - 0.6.75-7" date="1611316800">- Rebuilt for Boost 1.75</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.75-8" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 0.6.75-9" date="1612267200">- Resolves: #1913613 (Disable DII (and ImageMagic dependency) for RHEL 9)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Milan Crha &lt;mcrha@redhat.com&gt; - 0.6.75-11" date="1618920000">- Add patch to correct 'extern "C"' usage</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cabcf1b655efd1701492dc0c35cd4f6d6c1b851e3a49191e2a50b5ffa84afc49" name="python3-libuser" arch="aarch64">
  <version epoch="0" ver="0.63" rel="17.el9"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-13" date="1689076800">- Translation update
  Resolves: rhbz#2139662</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-14" date="1714996800">- Fix findings from static application security testing
  Resolves: RHEL-35693</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 0.63-15" date="1715083200">- Update translations
  Resolves: RHEL-12110</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.63-16" date="1730894400">- allow 32 char usernames (#RHEL-55983)</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 0.63-17" date="1743595200">- create temporary edit files at symlink target location (RHEL-85754)</changelog>
</package>
<package pkgid="a743f3f5b135f231c7d0832f0ba3c664afb1491cb53e134d5d138a2704fc6de1" name="python3-lttngust" arch="aarch64">
  <version epoch="0" ver="2.12.0" rel="6.el9"/>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 2.11.0-2" date="1579694400">- Add patch to fix build failure with GCC 10</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 2.11.0-3" date="1579780800">- Enable SystemTAP SDT support (#1386412)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.11.0-4" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 2.11.1-1" date="1583496000">- New upstream release
- Add requires systemtap-sdt-devel to lttng-ust-devel (#1386412)</changelog>
  <changelog author="Michael Jeanson &lt;mjeanson@efficios.com&gt; - 2.12.0-1" date="1586865600">- New upstream release</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.12.0-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12.0-3" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.12.0-4" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12.0-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.12.0-6" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8b0c862c07698952fb2849f54033294823637cdb20762035fced68c22fc00cb6" name="python3-mallard-ducktype" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="11.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.0.2-3" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.0.2-4" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-5" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.0.2-6" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="David King &lt;amigadave@amigadave.com&gt; - 1.0.2-7" date="1593000000">- BuildRequire python3-setuptools explicitly</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.2-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.2-11" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="96db3ade0ffa6a391972087594f1a6f79dd1b82cbca5230945de7c26e6125983" name="python3-mock" arch="noarch">
  <version epoch="0" ver="3.0.5" rel="17.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.5-8" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.0.5-9" date="1590148800">- Bootstrap for Python 3.9</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.0.5-10" date="1590148801">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.5-11" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.0.5-12" date="1607342400">- BuildRequire six to fix a build failure</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.5-13" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.0.5-14" date="1612267200">- Deprecate python3-mock
- https://fedoraproject.org/wiki/Changes/DeprecatePythonMock</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.0.5-15" date="1622635200">- Bootstrap for Python 3.10</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 3.0.5-16" date="1622635201">- Rebuilt for Python 3.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.5-17" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
</package>
<package pkgid="1a5e04e571d3b723338d68dcb57869775338fb5f84150ca3d99eb047fea88a7e" name="python3-munkres" arch="noarch">
  <version epoch="0" ver="1.1.2" rel="11.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.1.2-3" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.1.2-4" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.1.2-5" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-6" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.2-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.1.2-9" date="1621252800">- Resolves: rhbz#1960905 : License corrected to ASL 2.0
- See upstream commit 4bdf076 and release 1.0.7
- Added CI tests</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 1.1.2-10" date="1621944000">- Resolves: rhbz#1960905 : License corrected to ASL 2.0</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.2-11" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9a9a9008d9dde19599cf9f7e91ea47f5b9f2edb5281df483233d0d78e9393517" name="python3-numpy-doc" arch="noarch">
  <version epoch="1" ver="1.23.5" rel="2.el9_7"/>
  <changelog author="Pavel Simovec &lt;psimovec@redhat.com&gt; - 1:1.23.5-1" date="1728388800">- Update to 1.23.5
- Resolves: RHEL-5520</changelog>
  <changelog author="Luk&#xE1;&#x161; Zaoral &lt;lzaoral@redhat.com&gt; - 1:1.23.5-2" date="1770206400">- fix ppc64le test failures (RHEL-88575)</changelog>
</package>
<package pkgid="3b55a9031e44ea956a227d995a2c7a28a938a376a8c36afb220fa3b3970275f8" name="python3-openipmi" arch="aarch64">
  <version epoch="0" ver="2.0.36" rel="1.el9"/>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 2.0.36-1" date="1724673600">- Update to 2.0.36</changelog>
</package>
<package pkgid="973dbd37621a24ffb9b7032f63b0b40dd9662b32056ca2c5442be6bbd9dd90ba" name="python3-podman+progress_bar" arch="noarch">
  <version epoch="3" ver="5.7.0" rel="1.el9"/>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:5.0.0-1" date="1711368000">- update to https://github.com/containers/podman-py/releases/tag/v5.0.0
- Resolves: RHEL-30257</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:5.2.0-1" date="1722859200">- update to https://github.com/containers/podman-py/releases/tag/v5.2.0
- Related: RHEL-27608</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:5.3.0-1" date="1732708800">- update to https://github.com/containers/podman-py/releases/tag/v5.3.0
- Resolves: RHEL-69140</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:5.4.0.1-1" date="1741003200">- update to https://github.com/containers/podman-py/releases/tag/v5.4.0.1
- Resolves: RHEL-81952</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:5.5.0-1" date="1750420800">- update to https://github.com/containers/podman-py/releases/tag/v5.5.0
- Related: RHEL-80816</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:5.6.0-1" date="1758024000">- update to https://github.com/containers/podman-py/releases/tag/v5.6.0
- Related: RHEL-111919</changelog>
  <changelog author="Jindrich Novy &lt;jnovy@redhat.com&gt; - 3:5.7.0-1" date="1770206400">- update to https://github.com/containers/podman-py/releases/tag/v5.7.0
- Related: RHEL-111919</changelog>
</package>
<package pkgid="27acb88c060a9e636ee8f0a9340c036e9c84efcc4ff120e3e1c5a9f3bba6c416" name="python3-psycopg2-debug" arch="aarch64">
  <version epoch="0" ver="2.8.6" rel="6.el9"/>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 2.8.5-1" date="1587470400">- Rebase to upstream version 2.8.5</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.8.5-2" date="1590235200">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 2.8.6-1" date="1600344000">- Rebase to upstream version 2.8.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.6-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.8.6-3" date="1612785600">- rebuild for libpq ABI fix rhbz#1908268</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.6-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.6-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 2.8.6-6" date="1644321600">- Add automatically generated Obsoletes tag with the python39- prefix
  for smoother upgrade from RHEL8
- Add manual Obsoletes for python39-psycopg2-doc
- Related: rhbz#1990421</changelog>
</package>
<package pkgid="1f6c6add13df2d21a70478de497cbb0096058e34b532526d043e9956957ccd55" name="python3-psycopg2-tests" arch="aarch64">
  <version epoch="0" ver="2.8.6" rel="6.el9"/>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 2.8.5-1" date="1587470400">- Rebase to upstream version 2.8.5</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 2.8.5-2" date="1590235200">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Patrik Novotn&#xFD; &lt;panovotn@redhat.com&gt; - 2.8.6-1" date="1600344000">- Rebase to upstream version 2.8.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.6-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 2.8.6-3" date="1612785600">- rebuild for libpq ABI fix rhbz#1908268</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.6-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.6-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 2.8.6-6" date="1644321600">- Add automatically generated Obsoletes tag with the python39- prefix
  for smoother upgrade from RHEL8
- Add manual Obsoletes for python39-psycopg2-doc
- Related: rhbz#1990421</changelog>
</package>
<package pkgid="2b1c067285fb4443c8acb00cd9d732a0d427bef36ab98febef729b749c82706b" name="python3-pycotap" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="11.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.1.0-3" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.1.0-4" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-5" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.1.0-6" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-7" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-9" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Takao Fujiwara &lt;tfujiwar@redhat.com&gt; - 1.1.0-10" date="1619870400">- Enable CI. Related: rhbz#1956213</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-11" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="02097f49ee576759e700fadf369f62a32959579796df5f8abed1dd3b90dacab5" name="python3-pyghmi-tests" arch="noarch">
  <version epoch="0" ver="1.5.34" rel="2.el9"/>
  <changelog author="Yatin Karel &lt;ykarel@redhat.com&gt; - 1.5.14-1" date="1589198400">- Updated to 1.5.14.</changelog>
  <changelog author="Yatin Karel &lt;ykarel@redhat.com&gt; - 1.5.14-2" date="1589371200">- Fix typo in requirements</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.5.14-3" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Dmitry Tantsur &lt;divius.inside@gmail.com&gt; - 1.5.14-4" date="1590494401">- Relax dateutil requirement in requirement.txt as well (#1835084)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.14-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Dmitry Tantsur &lt;divius.inside@gmail.com&gt; - 1.5.16-1" date="1598788800">- Updated to 1.5.16.</changelog>
  <changelog author="Joel Capitao &lt;jcapitao@redhat.com&gt; - 1.5.19-1" date="1604664000">- Updated to 1.5.19.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.5.29-1" date="1628251200">- Updated to 1.5.29.
- Avoid dependency on python-pbr, conditionalize docs build, to allow building in RHEL.
  Inspired by python-sushy.</changelog>
  <changelog author="Pavel Cahyna &lt;pcahyna@redhat.com&gt; - 1.5.34-2" date="1645617600">- Updated to 1.5.34.</changelog>
</package>
<package pkgid="d39f3e7d7883ddc2cb746aa1903989d88335013a71130a193ebf8ecd874a71f1" name="python3-pyqt4-sip" arch="aarch64">
  <version epoch="0" ver="4.19.25" rel="2.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.19.25-2" date="1710331200">- Add py_ssize_t_clean module support for compatibility with python-qt5
  Resolves: RHEL-27554</changelog>
</package>
<package pkgid="5027cc3e059815bf6c7e830c57cadee9333d09d3f11a8fa58641a9c8a6048410" name="python3-pyudev-qt4" arch="noarch">
  <version epoch="0" ver="0.22.0" rel="6.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.21.0-12" date="1565956800">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.21.0-13" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.0-14" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="David Shea &lt;dshea@fedoraproject.org&gt; - 0.22.0-1" date="1580904000">- New upstream version</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.22.0-2" date="1590235200">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22.0-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22.0-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.22.0-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.22.0-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="09badb8d2b0a8f5a998b2413270d8cd875c0bff8116a93f93ca78f4254b83cd7" name="python3-pyudev-qt5" arch="noarch">
  <version epoch="0" ver="0.22.0" rel="6.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.21.0-12" date="1565956800">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.21.0-13" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.21.0-14" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="David Shea &lt;dshea@fedoraproject.org&gt; - 0.22.0-1" date="1580904000">- New upstream version</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.22.0-2" date="1590235200">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22.0-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.22.0-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.22.0-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.22.0-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="39648a62b34ad78cc9055d355b323aa0af7d5d7369cfd5092704bd2b33611c6a" name="python3-rados" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="57ed9a9900399c35e693b30edf31c6e9346bf4d53a457bed4ba802ddf28627bd" name="python3-rbd" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2ab70cbb37f8c664ecaee448ab0448f0d724b6f4d004f2a4d20994098d2d25aa" name="python3-rjsmin" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="5.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.0.12-16" date="1566216000">- Rebuilt for Python 3.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.0.12-17" date="1570104000">- Rebuilt for Python 3.8.0rc1 (#1748018)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.12-18" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 1.0.12-19" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.12-20" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Yatin Karel &lt;ykarel@redhat.com&gt; - 1.1.0-1" date="1599566400">- Update to 1.1.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Antonio Torres &lt;antorres@redhat.com&gt; - 1.1.0-4" date="1620648000">- Remove benchmarking files from sources</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="9a9aa0ef44ea7b14dc0e2e4f252ce6bb139490d4f80d7330a745f811c160b5f1" name="python3-rust2rpm" arch="aarch64">
  <version epoch="0" ver="17" rel="5.el9"/>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 13-3" date="1580731200">- Use 'cargo install --no-track' with cargo 1.41</changelog>
  <changelog author="Igor Raits &lt;ignatenkobrain@fedoraproject.org&gt; - 14-1" date="1588420800">- Update to 14</changelog>
  <changelog author="Igor Raits &lt;ignatenkobrain@fedoraproject.org&gt; - 15-1" date="1590148800">- Update to 15</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 15-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 15-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Igor Raits &lt;ignatenkobrain@fedoraproject.org&gt; - 17-1" date="1608984000">- Update to 17</changelog>
  <changelog author="Igor Raits &lt;ignatenkobrain@fedoraproject.org&gt; - 17-2" date="1609156800">- Band-aid clap pre-release version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 17-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 17-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 17-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="daff9fce9aa26e218444adb93cedb4da215b0d2bfd57ee24a9ee77eea1ffed54" name="python3-satyr" arch="aarch64">
  <version epoch="0" ver="0.38" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 0.31-1" date="1597752000">- Remove #define PyString_AsString PyUnicode_AsUTF8
- python: Adapt to changes made in PEP 590</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; 0.35-1" date="1606824000">- New upstream version
 - Fix leaks in koops stacktrace- and report-handling code
 - Replace utility code with GLib functions
 - Fix unit test portability issue
 - Add build dependency on make</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 0.35-2" date="1610366400">- Add fix for https://bugzilla.redhat.com/show_bug.cgi?id=1898063</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; 0.36-1" date="1610452800">- New upstream version
 - Fix builds with python3.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.36-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.36-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; 0.38-1" date="1624017600">- New upstream version
 - lib: Use GLib for computing SHA-1 digests
 - sr_distances_cluster_objects: Check arg safety</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.38-2" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 0.38-3" date="1639137600">- Rebuild against json-c-0.14-11
  Related: rhbz#2023326</changelog>
</package>
<package pkgid="d2a3a2030a6540f6471db8d1ed0ed17c0bc8a00e37ced69b6859577ee9b755a2" name="python3-sqlalchemy+asyncio" arch="aarch64">
  <version epoch="0" ver="1.4.45" rel="3.el9"/>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.29-1" date="1640260800">- version 1.4.29</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.31-1" date="1642766400">- version 1.4.31</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.32-1" date="1646740800">- version 1.4.32
- don't BR: python3-pytest-xdist on EL9
- remove obsolete (no-op) tweak of setup.cfg</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.34-1" date="1648814400">- version 1.4.34</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.35-1" date="1649332800">- version 1.4.35</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.36-1" date="1651060800">- version 1.4.36</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.37-1" date="1654084800">- version 1.4.37</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.37-2" date="1655467200">- Add python-sqlalchemy to RHEL-9
  Resolves: rhbz#2084556</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.37-3" date="1655553600">- Remove obsolete cruft from the specfile, follow the packaging guidelines
- Remove also extra packages we have no runtime dependencies for
  Related: rhbz#2084556</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.45-3" date="1670932800">- Update to current version - 1.4.45
  Resolves: rhbz#2152649</changelog>
</package>
<package pkgid="78f64552b15e24be444fea6e8753f65388228a6f881ef543ef23f647cf9fe0f6" name="python3-sqlalchemy+mssql_pyodbc" arch="aarch64">
  <version epoch="0" ver="1.4.45" rel="3.el9"/>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.29-1" date="1640260800">- version 1.4.29</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.31-1" date="1642766400">- version 1.4.31</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.32-1" date="1646740800">- version 1.4.32
- don't BR: python3-pytest-xdist on EL9
- remove obsolete (no-op) tweak of setup.cfg</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.34-1" date="1648814400">- version 1.4.34</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.35-1" date="1649332800">- version 1.4.35</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.36-1" date="1651060800">- version 1.4.36</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.37-1" date="1654084800">- version 1.4.37</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.37-2" date="1655467200">- Add python-sqlalchemy to RHEL-9
  Resolves: rhbz#2084556</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.37-3" date="1655553600">- Remove obsolete cruft from the specfile, follow the packaging guidelines
- Remove also extra packages we have no runtime dependencies for
  Related: rhbz#2084556</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.45-3" date="1670932800">- Update to current version - 1.4.45
  Resolves: rhbz#2152649</changelog>
</package>
<package pkgid="496aaf2cb3b17c00e663e37060db6e31c791b37cad76db68e7d31ae1c6768cf7" name="python3-sqlalchemy+postgresql" arch="aarch64">
  <version epoch="0" ver="1.4.45" rel="3.el9"/>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.29-1" date="1640260800">- version 1.4.29</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.31-1" date="1642766400">- version 1.4.31</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.32-1" date="1646740800">- version 1.4.32
- don't BR: python3-pytest-xdist on EL9
- remove obsolete (no-op) tweak of setup.cfg</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.34-1" date="1648814400">- version 1.4.34</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.35-1" date="1649332800">- version 1.4.35</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.36-1" date="1651060800">- version 1.4.36</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.37-1" date="1654084800">- version 1.4.37</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.37-2" date="1655467200">- Add python-sqlalchemy to RHEL-9
  Resolves: rhbz#2084556</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.37-3" date="1655553600">- Remove obsolete cruft from the specfile, follow the packaging guidelines
- Remove also extra packages we have no runtime dependencies for
  Related: rhbz#2084556</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.45-3" date="1670932800">- Update to current version - 1.4.45
  Resolves: rhbz#2152649</changelog>
</package>
<package pkgid="c062fe5a7c1baebc53012d56bbd89a28fc947208ecde97553a26bb735a4813e8" name="python3-sqlalchemy+pymysql" arch="aarch64">
  <version epoch="0" ver="1.4.45" rel="3.el9"/>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.29-1" date="1640260800">- version 1.4.29</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.31-1" date="1642766400">- version 1.4.31</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.32-1" date="1646740800">- version 1.4.32
- don't BR: python3-pytest-xdist on EL9
- remove obsolete (no-op) tweak of setup.cfg</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.34-1" date="1648814400">- version 1.4.34</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.35-1" date="1649332800">- version 1.4.35</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.36-1" date="1651060800">- version 1.4.36</changelog>
  <changelog author="Nils Philippsen &lt;nils@tiptoe.de&gt; - 1.4.37-1" date="1654084800">- version 1.4.37</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.37-2" date="1655467200">- Add python-sqlalchemy to RHEL-9
  Resolves: rhbz#2084556</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.37-3" date="1655553600">- Remove obsolete cruft from the specfile, follow the packaging guidelines
- Remove also extra packages we have no runtime dependencies for
  Related: rhbz#2084556</changelog>
  <changelog author="Sergio Correia &lt;scorreia@redhat.com&gt; - 1.4.45-3" date="1670932800">- Update to current version - 1.4.45
  Resolves: rhbz#2152649</changelog>
</package>
<package pkgid="3bbca33361f7afcbd462721b33b1975e2e901bb4011e956dcb1130f0fcea2ff4" name="python3-talloc-devel" arch="aarch64">
  <version epoch="0" ver="2.4.3" rel="1.el9"/>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.0-2" date="1685966400">- resolves: rhbz#2190418 - Rebuilt to retrigger brew build</changelog>
  <changelog author="Andreas Schneider &lt;asn@redhat.com&gt; - 2.4.1-1" date="1701345600">- resolves: RHEL-16479 - Rebase to version 2.4.1</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipen@redhat.com&gt; - 2.4.2-1" date="1713960000">- resolves: RHEL-33758 - Rebase to version 2.4.2</changelog>
  <changelog author="Pavel Filipensk&#xFD; &lt;pfilipensky@samba.org&gt; - 2.4.3-1" date="1747656000">- Rebase to version 2.4.3
- resolves: RHEL-89882</changelog>
</package>
<package pkgid="23cc34e4b586d50a6aa2cdea7ef1f95291750b4db0fc80f89a66b65833161a0a" name="python3-tqdm" arch="noarch">
  <version epoch="0" ver="4.65.0" rel="2.el9"/>
  <changelog author="Miro Hron&#x10D;ok &lt;miro@hroncok.cz&gt; 4.62.3-3" date="1642507200">- Run tests in %check</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; 4.62.3-4" date="1645444800">- Add package.cfg</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; 4.63.0-1" date="1646654400">- Update to 4.63.0</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; 4.63.1-1" date="1648123200">- Update to 4.63.1</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.64.0-2" date="1655208000">- Bootstrap for Python 3.11</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.64.0-3" date="1655812800">- Rebuilt for Python 3.11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.64.0-4" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Ma&#xED;ra Canal &lt;mairacanal@riseup.net&gt; - 4.64.1-1" date="1662292800">- Update to 4.64.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.64.1-2" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Stephen Gallagher &lt;sgallagh@redhat.com&gt; - 4.65.0-1" date="1678104000">- Update to 4.65.0</changelog>
</package>
<package pkgid="c2c6e69709cbbd80a12b41f4324e2c47fb5133f0580ea922cb294503eddf796f" name="python3-virt-firmware-tests" arch="noarch">
  <version epoch="0" ver="25.7.3" rel="1.el9"/>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 23.11-1" date="1702468800">- update to version 23.11</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 23.11-2" date="1704196800">- add uki-direct subpackage
- Resolves: RHEL-19383</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 23.11-3" date="1704283200">- add "obsoletes: rhel-cvm-update-tool" to uki-direct</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 24.1-1" date="1704801600">- update to version 24.1
- Resolves: RHEL-21090</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 24.1.1-1" date="1704974400">- update to version 24.1.1</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 24.2-1" date="1708084800">- update to version 24.2</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 24.4-1" date="1713182400">- update to version 24.4</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 24.7-1" date="1720699200">- update to version 24.7</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 24.11-1" date="1732881600">- update to version 24.11
- Resolves: RHEL-69507</changelog>
  <changelog author="Gerd Hoffmann &lt;kraxel@redhat.com&gt; - 24.11-2" date="1742990400">- backport bootctl fix for 99-uki-uefi-setup.install
- Resolves: RHEL-84984</changelog>
</package>
<package pkgid="b3121c936c9b8f6a522931c5edc20664379b1e9b3440ced5776bd0254600d81e" name="qdox" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.0.0-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.0.0-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-6" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0-7" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-10" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="db4283c63601c6f2eb9d13abbdc535bbb17a1fa053a676ce82ffaf1d9425e7fe" name="qdox" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="11.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.3-1" date="1692273600">- Update to upstream version 2.0.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.3-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-4" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-1" date="1706875200">- Update to upstream version 2.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-4" date="1720094400">- Enable upstream test suite</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-5" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-10" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b86990f10500a73457be79a778f538fa11a3883aed4212622ae80d8b8fb05f95" name="qdox-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.0.0-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.0.0-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-6" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0-7" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-8" date="1642766400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.0.0-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.0-10" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="b1646fed95030911e1b0ccfb5e7d8cb09843e31d5a43a1fa8f9718621d05ee7e" name="qdox-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.0-8.M9" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:2.0.0-1" date="1581595200">- Update to version 2.0.0.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.0.0-1" date="1582718400">- Update to upstream version 2.0.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:2.0.0-2" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.0.0-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.0.0-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0-6" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.0-7" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.0-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="207470dd29a4d5e26a3a02436c4190749b3701e4e9f53031655ed1a5e3d62828" name="qdox-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.0" rel="11.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.3-1" date="1692273600">- Update to upstream version 2.0.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.0.3-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-3" date="1705924800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.3-4" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-1" date="1706875200">- Update to upstream version 2.1.0</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-2" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.1.0-3" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-4" date="1720094400">- Enable upstream test suite</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1.0-5" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.1.0-10" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="7a66e4fa1d1b2b2d8f57cec5eaae1ccb857687c4b3da05c3ea0f77c10fab70d6" name="qemu-kvm-audio-dbus" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.3.alma.1" date="1783425600">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="4589664eea1ed6d7f5bf98f6231b2b616cc16422f63b3ae3d44a42940db7d7a2" name="qemu-kvm-audio-dbus" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.4.alma.1" date="1784635200">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="5b9870625845aba80fbea756a9771861f0bbfca5e89482e7f71edb5869632f42" name="qemu-kvm-audio-dbus" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.5.alma.1" date="1784635200">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="75aa0463a9424ada13ab6f0eff54023e0bf17129948f15da91a5c37c810632cd" name="qemu-kvm-audio-dbus" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-9" date="1765281600">- kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144]
- kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193]
- kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193]
- kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193]
- kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193]
- kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193]
- kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193]
- kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193]
- kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193]
- kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193]
- kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193]
- kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193]
- kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193]
- kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193]
- kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193]
- kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193]
- kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193]
- kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193]
- kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193]
- kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193]
- kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193]
- kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193]
- kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193]
- kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193]
- kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193]
- kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193]
- Resolves: RHEL-131144
  (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8])
- Resolves: RHEL-132193
  ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-10" date="1765800000">- kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193]
- Resolves: RHEL-132193
  ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.alma.1" date="1776340800">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="d1e56ac4253f457bd00c864f84ead840fe194ee03c79c3cfa5f6f70b609b82a0" name="qemu-kvm-tests" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.3.alma.1" date="1783425600">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="1dd28945504a942f351fb99ad05d7e258f9285b0c80a08fd524874f72ea68816" name="qemu-kvm-tests" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.4.alma.1" date="1784635200">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="33b0c14ee1c57b13f3904e39c63d1ee5638d2c38a6272aeae7dedeab162902e7" name="qemu-kvm-tests" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.5.alma.1" date="1784635200">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="f89320e95840929d094b09ac8fd5581222ce4814b3ba699bf716d74c9f94f362" name="qemu-kvm-tests" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-9" date="1765281600">- kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144]
- kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193]
- kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193]
- kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193]
- kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193]
- kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193]
- kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193]
- kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193]
- kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193]
- kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193]
- kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193]
- kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193]
- kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193]
- kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193]
- kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193]
- kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193]
- kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193]
- kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193]
- kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193]
- kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193]
- kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193]
- kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193]
- kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193]
- kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193]
- kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193]
- kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193]
- Resolves: RHEL-131144
  (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8])
- Resolves: RHEL-132193
  ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-10" date="1765800000">- kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193]
- Resolves: RHEL-132193
  ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.alma.1" date="1776340800">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="0b07b717c2eece40c66a21217e616eafc12fe67876d1dfd482e60f29a1990167" name="qemu-kvm-ui-dbus" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.3.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.3.alma.1" date="1783425600">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="8120ca9287e277a0696356a7a673c76b99ad9be43e669b358be053ca09f1ed62" name="qemu-kvm-ui-dbus" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.4.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.4.alma.1" date="1784635200">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="d94ed8c2352b30d33008fb71590fc794c999e866a49b2f5c88cac4f147e6e7da" name="qemu-kvm-ui-dbus" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.5.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.1" date="1777982400">- kvm-scsi-Don-t-consider-LOGICAL-UNIT-NOT-SUPPORTED-guest.patch [RHEL-164534]
- Resolves: RHEL-164534
  (qemu-kvm doesn't retry SG-IO on 05/25/00 (ILLEGAL REQUEST / LOGICAL UNIT NOT SUPPORTED) [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.2" date="1781524800">- kvm-scsi-adjust-error_prepend-formatting.patch [RHEL-166008]
- kvm-scsi-always-send-valid-PREEMPT-TYPE-field.patch [RHEL-166008]
- kvm-scsi-register-again-after-PREEMPT-without-reservatio.patch [RHEL-166008]
- Resolves: RHEL-166008
  (live migration failed the VM just register key only [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.3" date="1781697600">- kvm-accel-mshv-Remove-remap-overlapping-mappings-code.patch [RHEL-184951]
- kvm-accel-mshv-implement-cpu_thread_is_idle-hook.patch [RHEL-184951]
- Resolves: RHEL-184951
  (MSHV backport onto QEMU 10.1.0 is not able to launch MSHV guests [rhel-9.8.z])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17.el9_8.4" date="1782129600">- kvm-virtio-blk-add-missing-VIRTIO_BLK_T_SCSI_CMD-size-ch.patch [RHEL-184527]
- Resolves: RHEL-184527
  (CVE-2026-48914 qemu-kvm: Heap buffer overflow in virtio-blk SCSI request handling [rhel-9.8.z])</changelog>
  <changelog author="Danilo de Paula &lt;ddepaula@redhat.com&gt; - 10.1.0-17.el9_8.5" date="1784289600">- kvm-file-posix-populate-pwrite_zeroes_alignment.patch [RHEL-207387]
- kvm-block-use-pwrite_zeroes_alignment-when-writing-first.patch [RHEL-207387]
- kvm-iotests-add-Linux-loop-device-image-creation-test.patch [RHEL-207387]
- Resolves: RHEL-207387
  (qemu-img create/convert fails on target block device with 4k sector size [rhel-9.8.z])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.5.alma.1" date="1784635200">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="6c703fea0a24231a87f1ea96192874de4ff9c0b3f4a3dff3c0ce46abb307dde3" name="qemu-kvm-ui-dbus" arch="aarch64">
  <version epoch="17" ver="10.1.0" rel="17.el9_8.alma.1"/>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-9" date="1765281600">- kvm-pcie_sriov-make-pcie_sriov_pf_exit-safe-on-non-SR-IO.patch [RHEL-131144]
- kvm-accel-Add-Meson-and-config-support-for-MSHV-accelera.patch [RHEL-132193]
- kvm-target-i386-emulate-Allow-instruction-decoding-from-.patch [RHEL-132193]
- kvm-target-i386-mshv-Add-x86-decoder-emu-implementation.patch [RHEL-132193]
- kvm-hw-intc-Generalize-APIC-helper-names-from-kvm_-to-ac.patch [RHEL-132193]
- kvm-include-hw-hyperv-Add-MSHV-ABI-header-definitions.patch [RHEL-132193]
- kvm-linux-headers-linux-Add-mshv.h-headers.patch [RHEL-132193]
- kvm-accel-mshv-Add-accelerator-skeleton.patch [RHEL-132193]
- kvm-accel-mshv-Register-memory-region-listeners.patch [RHEL-132193]
- kvm-accel-mshv-Initialize-VM-partition.patch [RHEL-132193]
- kvm-accel-mshv-Add-vCPU-creation-and-execution-loop.patch [RHEL-132193]
- kvm-treewide-rename-qemu_wait_io_event-qemu_wait_io_even.patch [RHEL-132193]
- kvm-accel-mshv-Add-vCPU-signal-handling.patch [RHEL-132193]
- kvm-target-i386-mshv-Add-CPU-create-and-remove-logic.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_store_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_get_standard_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_get_special_regs.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_arch_put_registers.patch [RHEL-132193]
- kvm-target-i386-mshv-Set-local-interrupt-controller-stat.patch [RHEL-132193]
- kvm-target-i386-mshv-Register-CPUID-entries-with-MSHV.patch [RHEL-132193]
- kvm-target-i386-mshv-Register-MSRs-with-MSHV.patch [RHEL-132193]
- kvm-target-i386-mshv-Integrate-x86-instruction-decoder-e.patch [RHEL-132193]
- kvm-target-i386-mshv-Write-MSRs-to-the-hypervisor.patch [RHEL-132193]
- kvm-target-i386-mshv-Implement-mshv_vcpu_run.patch [RHEL-132193]
- kvm-accel-mshv-Handle-overlapping-mem-mappings.patch [RHEL-132193]
- kvm-qapi-accel-Allow-to-query-mshv-capabilities.patch [RHEL-132193]
- kvm-target-i386-mshv-Use-preallocated-page-for-hvcall.patch [RHEL-132193]
- kvm-docs-Add-mshv-to-documentation.patch [RHEL-132193]
- kvm-MAINTAINERS-Add-maintainers-for-mshv-accelerator.patch [RHEL-132193]
- kvm-accel-mshv-initialize-thread-name.patch [RHEL-132193]
- kvm-accel-mshv-use-return-value-of-handle_pio_str_read.patch [RHEL-132193]
- Resolves: RHEL-131144
  (qemu crash after hot-unplug disk from the multifunction enabled bus [RHEL.9.8])
- Resolves: RHEL-132193
  ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-10" date="1765800000">- kvm-monitor-generalize-query-mshv-info-mshv-to-query-acc.patch [RHEL-132193]
- Resolves: RHEL-132193
  ([rhel 9.8]L1VH qemu downstream initial merge RHEL9)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-11" date="1768824000">- kvm-block-Fix-BDS-use-after-free-during-shutdown.patch [RHEL-138240]
- Resolves: RHEL-138240
  (QEMU crashes when stopping source VM during live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-12" date="1769515200">- kvm-block-Improve-comments-in-BlockLimits.patch [RHEL-132989]
- kvm-block-Expose-block-limits-for-images-in-QMP.patch [RHEL-132989]
- kvm-qemu-img-info-Optionally-show-block-limits.patch [RHEL-132989]
- kvm-qemu-img-info-Add-cache-mode-option.patch [RHEL-132989]
- kvm-hw-intc-ioapic-Fix-ACCEL_KERNEL_GSI_IRQFD_POSSIBLE-t.patch [RHEL-140187]
- kvm-q35-increase-default-tseg-size.patch [RHEL-139057]
- Resolves: RHEL-132989
  (Expose block limits of block nodes in QMP and qemu-img [rhel-9])
- Resolves: RHEL-140187
  (Intel IOMMU VM freezes: "call_irq_handler: 3.37 No irq handler for vector"[rhel-9.8])
- Resolves: RHEL-139057
  ([qemu, rhel-9] increase default TSEG size)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-13" date="1770638400">- kvm-vhost-user-make-vhost_set_vring_file-synchronous.patch [RHEL-147422]
- kvm-hw-s390x-Fix-a-possible-crash-with-passed-through-vi.patch [RHEL-130620]
- Resolves: RHEL-147422
  (virtiofs: processes become stuck in request_wait_answer on virtiofs mounts)
- Resolves: RHEL-130620
  (VM crashes during boot when virtio device is attached through vfio_ccw [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-14" date="1771243200">- kvm-rbd-Run-co-BH-CB-in-the-coroutine-s-AioContext.patch [RHEL-67115]
- kvm-curl-Fix-coroutine-waking.patch [RHEL-67115]
- kvm-block-io-Take-reqs_lock-for-tracked_requests.patch [RHEL-67115]
- kvm-qcow2-Re-initialize-lock-in-invalidate_cache.patch [RHEL-67115]
- kvm-qcow2-Fix-cache_clean_timer.patch [RHEL-67115]
- Resolves: RHEL-67115
  ([network-storage][rbd][core-dump]installation of guest failed sometimes with multiqueue enabled[rhel9.6])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-15" date="1771848000">- kvm-scsi-generalize-scsi_SG_IO_FROM_DEV-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-add-error-reporting-to-scsi_SG_IO.patch [RHEL-149396]
- kvm-scsi-track-SCSI-reservation-state-for-live-migration.patch [RHEL-149396]
- kvm-scsi-save-load-SCSI-reservation-state.patch [RHEL-149396]
- kvm-docs-add-SCSI-migrate-pr-documentation.patch [RHEL-149396]
- Resolves: RHEL-149396
  (Migrate SCSI PR state and preempt reservation upon live migration [rhel-9])</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-16" date="1773748800">- kvm-block-Never-drop-BLOCK_IO_ERROR-with-action-stop-for.patch [RHEL-151679]
- Resolves: RHEL-151679
  ([rhel-9.8] Regression in BLOCK_IO_ERROR event delivery with (w|r)error setting of 'stop' or 'enospc' due to event rate limiting)</changelog>
  <changelog author="Jon Maloy &lt;jmaloy@redhat.com&gt; - 10.1.0-17" date="1775044800">- kvm-mirror-Fix-missed-dirty-bitmap-writes-during-startup.patch [RHEL-155947 RHEL-155948]
- kvm-linux-aio-Put-all-parameters-into-qemu_laiocb.patch [RHEL-154174]
- kvm-linux-aio-Resubmit-tails-of-short-reads-writes.patch [RHEL-154174]
- kvm-block-io_uring-avoid-potentially-getting-stuck-after.patch [RHEL-154174]
- kvm-io-uring-Resubmit-tails-of-short-writes.patch [RHEL-154174]
- Resolves: RHEL-155947
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9.8])
- Resolves: RHEL-155948
  (Mirror job can miss writes during startup, corrupting the copy [rhel-9])
- Resolves: RHEL-154174
  (qemu-kvm: disk writes of fewer bytes than requested is a retry condition, not necessarily an indication of ENOSPC [rhel-9.8])</changelog>
  <changelog author="Eduard Abdullin &lt;eabdullin@almalinux.org&gt; - 17:10.1.0-17.alma.1" date="1776340800">- Enable building for ppc64le
- Don't remove slof.bin for ppc64le
- usb: add config options for hub and hid devices for ppc
- Remove pnv_chip_find_core calls from SPRD helpers
- Remove pre-3.0 migration from spapr_compat_rhel7_6</changelog>
</package>
<package pkgid="2adeb4c65fb7efb0acc12fe4877a51f6e423f51fe922ba2f404b704bdce31017" name="qhull" arch="aarch64">
  <version epoch="1" ver="7.2.1" rel="11.el9"/>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1:7.2.1-10" date="1692619200">- Compile libqhullcpp with -fPIC
- Resolves: RHEL-5625</changelog>
  <changelog author="Filip Janus &lt;fjanus@redhat.com&gt; - 1:7.2.1-11" date="1699444800">- Release bump to enable added gating.yaml
- Resolves: RHEL-5625</changelog>
</package>
<package pkgid="7fa0128465fe7a75bc1276fa7c31703073f4037b57af702927bd9473ca0fe8e9" name="qpdf-doc" arch="noarch">
  <version epoch="0" ver="10.3.1" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.1.0-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.2.0-1" date="1614168000">- 1932052 - qpdf-10.2.0 is available</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.3.0-1" date="1615464000">- 1935799 - qpdf-10.3.0 is available</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.3.1-1" date="1615550400">- 1937988 - qpdf-10.3.1 is available</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 10.3.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.3.1-3" date="1618920000">- 1950033 - Possible changes in zlib output causes FTBFS for qpdf</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 10.3.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.3.1-5" date="1656504000">- 2095993 - Move qpdf to CRB repository</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.3.1-6" date="1657886400">- 2106940 - FIPS breaks pdftopdf and bannertopdf</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 10.3.1-7" date="1672833600">- 2157765 - Ship qpdf-devel in CRB</changelog>
</package>
<package pkgid="247f25df05801ff6d84160b75a4eeba6884baf334317eee9454b6ad13851909d" name="qt5-qt3d-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="3.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-2" date="1753272000">- Assimp: Fix heap-based overflow in Assimp::LWO::AnimResolver::UpdateAnimRangeSetup
  Resolves: RHEL-104999
- Assimp: Fix heap-based overflow in Assimp::ASE::Parser::ParseLV4MeshBonesVertices
  Resolves: RHEL-105004</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-3" date="1762344000">- Assimp: Fix heap-based overflow in Q3DLoader::InternReadFile
  Resolves: RHEL-120985</changelog>
</package>
<package pkgid="aba505d38a3266291ce082dfc93bb1e9102b680a9719ffd9cba4e7d430fa842c" name="qt5-qtbase-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="11.el9_6"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-7" date="1689940800">- Fix infinite loops in QXmlStreamReader (CVE-2023-38197)
  Resolves: bz#2222771</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-8" date="1704369600">- Fix incorrect integer overflow check in HTTP2 implementation
  Resolves: RHEL-20239</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-9" date="1708084800">- Fix CVE-2024-25580: potential buffer overflow when reading KTX images
  Resolves: RHEL-25726</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-10" date="1720699200">- HTTP2: Delay any communication until encrypted() can be responded to
  Resolves: RHEL-46351</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-11" date="1749729600">- qt5: QtCore Assertion Failure Denial of Service
  Resolves: RHEL-96231</changelog>
</package>
<package pkgid="cf1208ffcafb4731cb977f65db6bcc8349ec6f7cbc8add29f28e1d740bb42d50" name="qt5-qtcanvas3d-doc" arch="noarch">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648814400">- 5.15.3
  Resolves: bz#2061353</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175726</changelog>
</package>
<package pkgid="920aa539cedf30b9ab1dc92f505b0b46d2c8a166b069899638e800cfd5cf0f8b" name="qt5-qtconnectivity-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="2.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968461</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061357</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175730</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-2" date="1682424000">- Rebuild (elfutils#2188064)
  Resolves: bz#2175730</changelog>
</package>
<package pkgid="c8a83ed28d7bec40ad8fd1364d113126f204fc5937f1f77c316ead8ed5f233c6" name="qt5-qtdeclarative-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="3.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-6" date="1623240000">- Add gating tests
  Resolves: bz#1968462</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-7" date="1623326400">- Let qt5_install_tests macro handle mangling python shebangs
  Resolves: bz#1968462</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-9" date="1631102400">- Sync with Fedora:
  - sync kde/5.15 branch fixes
  - pull in candidate fix QTBUG-83890
  Resolves: bz#1988934</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-10" date="1639051200">- Sync with Fedora
  Resolves: bz#2025420</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648209600">- 5.15.3 + sync with Fedora
  Resolves: bz#2061355</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681732800">- 5.15.9 + sync with Fedora
  Resolves: bz#2178624
  Resolves: bz#2175728</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-2" date="1681732801">- Disable tests failing in gating
  Resolves: bz#2175728</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-3" date="1682510400">- Rebuild (elfutils#2188064)
  Resolves: bz#2175728</changelog>
</package>
<package pkgid="07b21f866460c82567c128c153786be50d201db704c3af92de9fe45632f7de5a" name="qt5-qtgraphicaleffects-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968464</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061359</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175733</changelog>
</package>
<package pkgid="3544d56f40c9785ac389eed753f54a40ab207a5ad754f7348e7cf66f5f97fee8" name="qt5-qtimageformats-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968465</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061360</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175734</changelog>
</package>
<package pkgid="f1294d9040cc59a87109a4444f70efd775b7e9745bb3c02a95e09237fe539daa" name="qt5-qtlocation-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-7" date="1623240000">- Add gating tests
  Resolves: bz#1968466</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-8" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061361</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175735</changelog>
</package>
<package pkgid="3f7cbac2e5423fa3fd71a75f0529e5b1e2f7fe572b5247e9cb6f2129131362bf" name="qt5-qtmultimedia-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968467</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-6" date="1623326400">- Let qt5_install_tests macro handle mangling python shebangs
  Resolves: bz#1968467</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061361</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175736</changelog>
</package>
<package pkgid="f7475e1e96741fd62c5c3f3206ff968d75bdbc5f5305801a2eb7ff24338efde0" name="qt5-qtquickcontrols-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968468</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061363</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175737</changelog>
</package>
<package pkgid="1b8a29779bc4104672e83fdc06085d781201e886cc1cc6c21e39ad0841fbd248" name="qt5-qtquickcontrols2-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968469</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-7" date="1638964800">- Rebuild (move -devel subpkg to AppStream)
  Resolves: bz#2028779</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061364</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175738</changelog>
</package>
<package pkgid="888976ac3237409df7f56825c62dc6c6a2763c1d16a9b53412821c7d2513ebf1" name="qt5-qtscript-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968470</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061365</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175745</changelog>
</package>
<package pkgid="5cb0734e051f611ad23c501c26fa4033e5acae1ed6dc6f86c732e42fd2db93c1" name="qt5-qtsensors-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968471</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-7" date="1631102400">- Sync with Fedora
  - add recommends: iio-sensor-proxy
  Resolves: bz#1971438</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061366</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175739</changelog>
</package>
<package pkgid="e8b1267e1de04d8b6fd69cfbc8ec9ae535cb409c6db05018dde67b1b4af3f2bb" name="qt5-qtserialbus-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968472</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-6" date="1624104000">- Properly build unit tests
  Resolves: bz#1968472</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-8" date="1639742400">- Rebuild to include -devel subpkg in AppStream
  Resolves: bz#2028567</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061367</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175740</changelog>
</package>
<package pkgid="ed71ac3d5c315ef6ddbda865b6e47a9ce46365bab9ad27ef31ad0bd63e7b1a1b" name="qt5-qtserialport-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968473</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061368</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175741</changelog>
</package>
<package pkgid="3595735574b39a3c527245e0fc65befc20408dbb5225a8f57805c4c8886859eb" name="qt5-qtsvg-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="2.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-6" date="1623240000">- Add gating tests
  Resolves: bz#1968474</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-8" date="1641902400">- Fix out-of-bound write that may lead to DoS
  Resolves: bz#2038488</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061369</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175742</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-2" date="1684411200">- Fix uninitialized variable usage in m_unitsPerEm (CVE-2023-32573)
  Resolves: bz#2208140</changelog>
</package>
<package pkgid="9328d4bc527f51f4252b67906012fc3ae9b522aabd7711b6e8d6ad761540e66f" name="qt5-qttools-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="8.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-5" date="1720699200">- Rebuild (LLVM-18)
  Resolves: RHEL-28681</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt;" date="1734350400">- Rebuild (LLVM-19)
  Resolves: RHEL-66115</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt;" date="1744804800">- Rebuild (LLVM-20)
  Resolves: RHEL-81777</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt;" date="1764676800">- Rebuild (LLVM-21)
  Resolves: RHEL-108348</changelog>
</package>
<package pkgid="6db814d7e7755bdc4f0a14c6c1111cc1aaea65565b69a44b27d5a27bb5fd610f" name="qt5-qtwayland-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-9" date="1629720000">- Client: expose toplevel window state (change from Qt6)
  Resolves: bz#1968292</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-10" date="1632139200">- Sync with Fedora
  Resolves: bz#2003935</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-11" date="1634126400">- Sync with Fedora
  Resolves: bz#2012714</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-12" date="1634212800">- Drop BR: tree
  Resolves: bz#2014080</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-13" date="1638964800">- Sync with Fedora
  Resolves: bz#2028778</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-14" date="1643025600">- Sync with Fedora
  Resolves: bz#2044169</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-15" date="1644926400">- Sync with Fedora
  Resolves: bz#2051384</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061372</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175746</changelog>
</package>
<package pkgid="5f6dd8d7558d3acbb328f5259cfb5e3e5970cbf595d9c638c59bca01ed3c296d" name="qt5-qtwebchannel-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968478</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061373</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175747</changelog>
</package>
<package pkgid="d0661261d8e82531f4c052c085ca4306a51ca3746b83e466fbd2be2a5a805410" name="qt5-qtwebsockets-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="2.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968479</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061374</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175749</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-2" date="1681905600">- Move QML imports out of -devel subpackage
  Resolves: bz#2175749</changelog>
</package>
<package pkgid="ad9d97c87eb2c9e65e9ac43f5b907c53ce5d9eb0f63285d8a50aa804dab0480e" name="qt5-qtx11extras-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="1.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-5" date="1623240000">- Add gating tests
  Resolves: bz#1968481</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648468800">- 5.15.3
  Resolves: bz#2061375</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175750</changelog>
</package>
<package pkgid="9b642bdfd1af8a09a99a7e7cf19329bc154edebb26650d69ab3c89273eaeda64" name="qt5-qtxmlpatterns-tests" arch="aarch64">
  <version epoch="0" ver="5.15.9" rel="2.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.2-6" date="1623240000">- Add gating tests
  Resolves: bz#1968480</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.15.2-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.3-1" date="1648209600">- 5.15.3
  Resolves: bz#2061376</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-1" date="1681819200">- 5.15.9
  Resolves: bz#2175751</changelog>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 5.15.9-2" date="1682424000">- Rebuild (elfutils#2188064)
  Resolves: bz#2175751</changelog>
</package>
<package pkgid="4236f4c2d2c5c6127af2bbe61f1f9dc0406bc15f0cb3a65058fbdb8dcf8ba40e" name="qv4l2" arch="aarch64">
  <version epoch="0" ver="1.20.0" rel="6.el9"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.20.0-6" date="1765454400">- Rebuilt for CRB inclusion
  Resolves: RHEL-135108</changelog>
</package>
<package pkgid="10837c2ca75d3680cab41384cf5b6be6e042f2f1f9083d05eb99605511239b3a" name="rados-objclass-devel" arch="aarch64">
  <version epoch="2" ver="16.2.4" rel="5.el9"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.4.snapshot" date="1613822400">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle[at]redhat.com&gt; - 2:16.1.0-0.5.snapshot" date="1614945600">- ceph 16.1.0 RC (ceph-16.1.0-308-gabe639eb)
-  rpmbuild apparently unable to automatically derive 'Requires: rocksdb' from 'BuildRequires: rocksdb-devel' for librocksdb.so.6.13</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.6.snapshot" date="1615809600">- disable multiple build options
- disable multiple packages
- remove unnecessary files</changelog>
  <changelog author="Boris Ranto &lt;branto[at]redhat.com&gt; - 2:16.1.0-0.7.snapshot" date="1615809601">- libblk.so -&gt; libblk.a
- remove python3-rgw from ceph-common deps</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.1.0-0.8.snapshot" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-1" date="1622203200">- Rebase to 16.2.4
- Add libcephsqlite packages</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-2" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-3" date="1627387200">- Apply fmt-header-only patches
- Update licence field
- Drop unnecessary dependencies</changelog>
  <changelog author="Boris Ranto &lt;branto@redhat.com&gt; - 2:16.2.4-4" date="1628164800">- Drop fmt-devel from build requires</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2:16.2.4-5" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="59eb2f84a690cbebe7d1d1f629e4ef78b7da7ee5b87a20fb82c3cb4b8f5f5ef6" name="rapidjson-devel" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="19.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-12" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Hughes &lt;tom@compton.nu&gt; - 1.1.0-13" date="1594728000">- Install pkg-config and cmake files to arched location
- Build documentation as noarch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-14" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tom Hughes &lt;tom@compton.nu&gt; - 1.1.0-15" date="1598961600">- Add patch for C++20 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-16" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-17" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.1.0-18" date="1626350400">- Remove gtest dependency and turn off tests
  Resolves: #1977656</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-19" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="aea54ae5898278e36afe9650663a6aaec3194b276632aa0b77a918cd53a1d79a" name="rapidjson-doc" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="19.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-12" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Hughes &lt;tom@compton.nu&gt; - 1.1.0-13" date="1594728000">- Install pkg-config and cmake files to arched location
- Build documentation as noarch</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-14" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tom Hughes &lt;tom@compton.nu&gt; - 1.1.0-15" date="1598961600">- Add patch for C++20 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-16" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-17" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1.1.0-18" date="1626350400">- Remove gtest dependency and turn off tests
  Resolves: #1977656</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-19" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="135e3cebe06cce8f679a665ef351f923973f3026a487dcc6742451c42e1e5f14" name="readline-static" arch="aarch64">
  <version epoch="0" ver="8.1" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0-4" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.0-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Siteshwar Vashisht &lt;svashisht@redhat.com&gt; - 8.1-1" date="1609929141">- Rebase to readline-8.1
  Resolves: #1904867</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.1-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5d8935cd13e46b20cd15ba2964fbfb1ae21a94ab63d75248a7dc74c18331d8ba" name="realmd-devel-docs" arch="aarch64">
  <version epoch="0" ver="0.17.1" rel="2.el9"/>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt; - 0.17.1-1" date="1665748800">- Update to upstream release 0.17.1
  Resolves: rhbz#2129050, rhbz#2133839</changelog>
  <changelog author="Sumit Bose &lt;sbose@redhat.com&gt;" date="1708430400">- Use make macros https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro
- migrated to SPDX license
- allow multiple names and _srv_ ad_server option
  Resolves: jira#RHEL-12112
- fix ccache handling for leave operation
  Resolves: jira#RHEL-5104</changelog>
</package>
<package pkgid="23028e412322de11a43e20bad415e7c7d9d19629cb6a9cda8f540498ef560e0e" name="realtime-setup" arch="aarch64">
  <version epoch="0" ver="2.5" rel="4.el9"/>
  <changelog author="Clark Williams &lt;williams@redhat.com&gt; - 2.5-1" date="1723550400">- remove strip of realtime-entsk and generate debuginfo
- ensure all files have valid SPDX license identifiers
- remove Red Hat Makefile targets and specfile
- Makefile cleanups and added .gitignore
- drop the 'v' in the version string for the tarball
- Makefile: add options for passing annocheck
- Bump version to 2.5
Resolves: RHEL-30179</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 2.5-2" date="1733745600">- Add an rpminspect.yaml file to turn-off debuginfo testing
Resolves: RHEL-70582</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 2.5-3" date="1733832000">- Rebuild
Resolves: RHEL-70582</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 2.5-4" date="1737547200">- Do not generate debug packages
Resolves: RHEL-70582</changelog>
</package>
<package pkgid="a12ed08772dd792e7b5b471ced62cada08794f6be042f35cef552fcdd117ade4" name="redhat-lsb" arch="aarch64">
  <version epoch="0" ver="4.1" rel="56.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-49" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-50" date="1580731200">- Use macros when invoking for invoking make and gcc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-53" date="1621944000">- Do not call non-existing lsn program on glibc updates</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-54" date="1621944001">- Remove unnecessary redhat_lsb_trigger.* programs (#1964367)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-55" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.1-56" date="1628769600">- Remove things that we don't ship</changelog>
</package>
<package pkgid="d0cd3a291a5f3b4485be521a76a66dbfb41ba8ceb06150aa5eba91cebfe34ee7" name="redhat-lsb-core" arch="aarch64">
  <version epoch="0" ver="4.1" rel="56.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-49" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-50" date="1580731200">- Use macros when invoking for invoking make and gcc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-53" date="1621944000">- Do not call non-existing lsn program on glibc updates</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-54" date="1621944001">- Remove unnecessary redhat_lsb_trigger.* programs (#1964367)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-55" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.1-56" date="1628769600">- Remove things that we don't ship</changelog>
</package>
<package pkgid="eb0b0ba7fa8fafa69fb67ed9f12baeac12ec9ac05c476890256b70b9f8043d31" name="redhat-lsb-cxx" arch="aarch64">
  <version epoch="0" ver="4.1" rel="56.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-49" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-50" date="1580731200">- Use macros when invoking for invoking make and gcc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-53" date="1621944000">- Do not call non-existing lsn program on glibc updates</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-54" date="1621944001">- Remove unnecessary redhat_lsb_trigger.* programs (#1964367)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-55" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.1-56" date="1628769600">- Remove things that we don't ship</changelog>
</package>
<package pkgid="3ffbd047e5f206335dc33cd113d34438f0adcecfe474dde875c34fde38565d33" name="redhat-lsb-desktop" arch="aarch64">
  <version epoch="0" ver="4.1" rel="56.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-49" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-50" date="1580731200">- Use macros when invoking for invoking make and gcc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-53" date="1621944000">- Do not call non-existing lsn program on glibc updates</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-54" date="1621944001">- Remove unnecessary redhat_lsb_trigger.* programs (#1964367)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-55" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.1-56" date="1628769600">- Remove things that we don't ship</changelog>
</package>
<package pkgid="f03ec3aed50c8c7878e6353b3b2e069387b945286251c33c24c029677831612e" name="redhat-lsb-languages" arch="aarch64">
  <version epoch="0" ver="4.1" rel="56.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-49" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-50" date="1580731200">- Use macros when invoking for invoking make and gcc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-53" date="1621944000">- Do not call non-existing lsn program on glibc updates</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-54" date="1621944001">- Remove unnecessary redhat_lsb_trigger.* programs (#1964367)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-55" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.1-56" date="1628769600">- Remove things that we don't ship</changelog>
</package>
<package pkgid="d32227c61964db53500ee4d4cdc0e04e06cb4479b87f00e5227d8cf88c3f5aa7" name="redhat-lsb-printing" arch="aarch64">
  <version epoch="0" ver="4.1" rel="56.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-49" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-50" date="1580731200">- Use macros when invoking for invoking make and gcc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-53" date="1621944000">- Do not call non-existing lsn program on glibc updates</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-54" date="1621944001">- Remove unnecessary redhat_lsb_trigger.* programs (#1964367)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-55" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.1-56" date="1628769600">- Remove things that we don't ship</changelog>
</package>
<package pkgid="b62c7b2ebcbabd294f8173d9804a8fbe8d1a49188fb1fdc4e12bc73c462934b4" name="redhat-lsb-submod-multimedia" arch="aarch64">
  <version epoch="0" ver="4.1" rel="56.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-49" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-50" date="1580731200">- Use macros when invoking for invoking make and gcc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-53" date="1621944000">- Do not call non-existing lsn program on glibc updates</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-54" date="1621944001">- Remove unnecessary redhat_lsb_trigger.* programs (#1964367)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-55" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.1-56" date="1628769600">- Remove things that we don't ship</changelog>
</package>
<package pkgid="e539cc6db0d7c46c6db5964b8cc4ac88d0d0142f2321e6759666c9efc6e1e672" name="redhat-lsb-submod-security" arch="aarch64">
  <version epoch="0" ver="4.1" rel="56.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-49" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-50" date="1580731200">- Use macros when invoking for invoking make and gcc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-53" date="1621944000">- Do not call non-existing lsn program on glibc updates</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-54" date="1621944001">- Remove unnecessary redhat_lsb_trigger.* programs (#1964367)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-55" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.1-56" date="1628769600">- Remove things that we don't ship</changelog>
</package>
<package pkgid="650ef4c2c4fafa5699e4d0425fa2e2f11beaa3e871f690c2a1d2867fc32c8324" name="redhat-lsb-supplemental" arch="aarch64">
  <version epoch="0" ver="4.1" rel="56.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-49" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-50" date="1580731200">- Use macros when invoking for invoking make and gcc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-53" date="1621944000">- Do not call non-existing lsn program on glibc updates</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-54" date="1621944001">- Remove unnecessary redhat_lsb_trigger.* programs (#1964367)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-55" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.1-56" date="1628769600">- Remove things that we don't ship</changelog>
</package>
<package pkgid="02bd23584bce52e283afd87b157b6322c371ef9ac42acb84509b26ca90543f38" name="redhat-lsb-trialuse" arch="aarch64">
  <version epoch="0" ver="4.1" rel="56.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-49" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 4.1-50" date="1580731200">- Use macros when invoking for invoking make and gcc</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-51" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1-52" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-53" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-53" date="1621944000">- Do not call non-existing lsn program on glibc updates</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 4.1-54" date="1621944001">- Remove unnecessary redhat_lsb_trigger.* programs (#1964367)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1-55" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 4.1-56" date="1628769600">- Remove things that we don't ship</changelog>
</package>
<package pkgid="625ca2c6229dc24a53a8958c1535da1918d389f840f14d351ba967f0e947817c" name="regexp-javadoc" arch="noarch">
  <version epoch="1" ver="1.5" rel="42.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt;" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:1.5-39" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:1.5-40" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:1.5-41" date="1732363200">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:1.5-42" date="1733313600">- Update Java source/target to 1.8
- Install license files in licensedir instead of docdir</changelog>
</package>
<package pkgid="41bebe8f2fc695fb7859b7d16f18ef56620b281754457e61d1015273bf123ac9" name="replacer" arch="noarch">
  <version epoch="0" ver="1.6" rel="20.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-11" date="1564142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.6-12" date="1574424000">- Remove unnecessary dependency on parent POM.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-13" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.6-14" date="1593172800">- Allow building against Java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.6-15" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-16" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.6-17" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-18" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.6-19" date="1620820800">- Remove maven-javadoc-plugin dependency</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-20" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
</package>
<package pkgid="843ffc5513129f69319c093ac476dea653a0e3f727b352177db802ee1e34295b" name="replacer-javadoc" arch="noarch">
  <version epoch="0" ver="1.6" rel="20.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-11" date="1564142400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.6-12" date="1574424000">- Remove unnecessary dependency on parent POM.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-13" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 1.6-14" date="1593172800">- Allow building against Java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.6-15" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-16" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.6-17" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-18" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 1.6-19" date="1620820800">- Remove maven-javadoc-plugin dependency</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-20" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
</package>
<package pkgid="694e3b846e91b3ae632f9eb8869e9dd20c06c535cda9c891bab58f1620696827" name="rgb" arch="aarch64">
  <version epoch="0" ver="1.0.6" rel="44.el9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 7.7-35" date="1589889600">- xisxwayland 1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.7-36" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 7.7-37" date="1604572496">- Add BuildRequires for make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.7-38" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 7.7-39" date="1614254400">- Provide xisxwayland like all other utilities</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7.7-40" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 7.7-41" date="1619697600">- Drop mcpp from xrdb (#1954350)</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 7.7-42" date="1620129600">- Prune obsolete/unused utilities (#1954355)
- Clean up the .gitignore file</changelog>
  <changelog author="Adam Jackson &lt;ajax@redhat.com&gt; - 7.7-43" date="1620129601">- Recommends: cpp for xrdb (#1954350)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7.7-44" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3447e64323f9e45ca6bdbd13f374db66966a7b9f0df1ee05b02bfacdc3322900" name="rpm-local-generator-support" arch="noarch">
  <version epoch="0" ver="1" rel="1.module_el9.4.0+75+1a8fe981"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1-1" date="1696593600">- Initial version.</changelog>
</package>
<package pkgid="5c2807b270b3ed56b6009528dc129c7bf0110a52488e35af8f4717d95b2e20a4" name="rpm-local-generator-support" arch="noarch">
  <version epoch="0" ver="1" rel="1.module_el9.8.0+232+50f6dd36"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1-1" date="1696593600">- Initial version.</changelog>
</package>
<package pkgid="1923c9b84622f83e23989b20a6a244e829efa4345d9a5fa866ffe0be1a95ea2c" name="rpm-local-generator-support" arch="noarch">
  <version epoch="0" ver="1" rel="1.module_el9.8.0+289+5a070f48"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1-1" date="1696593600">- Initial version.</changelog>
</package>
<package pkgid="34c00ce2f54f393dfe4a0512e47a7becec0c10270c11926de38c57aa90bdfda8" name="rpm-ostree-devel" arch="aarch64">
  <version epoch="0" ver="2026.1" rel="3.el9"/>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2025.7-1" date="1743163200">- Rebase to 2025.7
  Resolves: #RHEL-85392</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2025.7-2" date="1743508800">- Backport https://github.com/coreos/rpm-ostree/pull/5351
  Resolves: #RHEL-85684</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2025.8-1" date="1746705600">- Rebase to 2025.8
  Resolves: #RHEL-90254</changelog>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2025.8-3" date="1749038400">- Move `ostree container` to bootc
  Resolves: #RHEL-72863</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2025.9-1" date="1752235200">- Rebase to 2025.9
  Resolves: #RHEL-103135</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2025.10-1" date="1753963200">- Rebase to 2025.10
  Resolves: #RHEL-106848</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2025.11-1" date="1757505600">- Rebase to 2025.11
  Resolves: #RHEL-113381</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2026.1-1" date="1769083200">- Rebase to 2026.1
  Resolves: RHEL-143217
  Resolves: RHEL-143210</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2026.1-2" date="1769515200">- Revert conditional change for ostree_ext
  Resolves: RHEL-144611</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2026.1-3" date="1770292800">- Backport https://github.com/coreos/rpm-ostree/pull/5558
  Resolves: RHEL-147222</changelog>
</package>
<package pkgid="f70245d4259de855ddc0456bc06111842aa6860d159a8db44c53ff3a7cf8e3fb" name="rpm-ostree-devel" arch="aarch64">
  <version epoch="0" ver="2026.1" rel="6.el9_8"/>
  <changelog author="Colin Walters &lt;walters@verbum.org&gt; - 2025.8-3" date="1749038400">- Move `ostree container` to bootc
  Resolves: #RHEL-72863</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2025.9-1" date="1752235200">- Rebase to 2025.9
  Resolves: #RHEL-103135</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2025.10-1" date="1753963200">- Rebase to 2025.10
  Resolves: #RHEL-106848</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2025.11-1" date="1757505600">- Rebase to 2025.11
  Resolves: #RHEL-113381</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2026.1-1" date="1769083200">- Rebase to 2026.1
  Resolves: RHEL-143217
  Resolves: RHEL-143210</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2026.1-2" date="1769515200">- Revert conditional change for ostree_ext
  Resolves: RHEL-144611</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2026.1-3" date="1770292800">- Backport https://github.com/coreos/rpm-ostree/pull/5558
  Resolves: RHEL-147222</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2026.1-4" date="1773144000">- Backport https://github.com/coreos/rpm-ostree/pull/5569
  Resolves: RHEL-154808</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2026.1-5" date="1773662400">- Rebuilt for RHEL 9.8
  Resolves: RHEL-154807</changelog>
  <changelog author="Joseph Marrero &lt;jmarrero@fedoraproject.org&gt; - 2026.1-6" date="1774008000">- Backport: https://github.com/coreos/rpm-ostree/pull/5575
  Resolves: RHEL-154807</changelog>
</package>
<package pkgid="87f1c09f1c9c7c793334b35f06df3621cb5aeaa9f0d9f06292bd44371a7dcfd8" name="rpm-plugin-prioreset" arch="aarch64">
  <version epoch="0" ver="4.16.1.3" rel="40.el9"/>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-31" date="1720785600">- Fix potential use of uninitialized pipe array (RHEL-22604)
- Fix potential use of uninitialized pgp struct (RHEL-22605)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)
- Add SourceLicense tag to spec syntax (RHEL-28798)
- Talk about rpmsign in the rpmsign(8) man page (RHEL-40895)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-32" date="1720785601">- Revert incorrect fix for false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-33" date="1722859200">- Fix root relocation regression (RHEL-28967)
- Don't confuse OpenScanHub with false array overrun (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-34" date="1723550400">- Fix discarded const qualifier in previous patch (RHEL-22607)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-35" date="1729080000">- Fix %patch N applying Patch0 implicitly (RHEL-6294)
- Issue deprecation warning for number-less %patch (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-36" date="1730894400">- Improve newly added %patch warning/error messages (RHEL-6294)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-37" date="1736769600">- Allow parametric macros to opt out of option processing (RHEL-67161)
- Report unsafe symlinks during installation as a specific case (RHEL-33393)
- Fix FA_TOUCH'ed files getting removed on failed update (RHEL-63070)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-38" date="1746619200">- Add support for spec local file attributes and generators (RHEL-52772)
- Store configurable digest(s) on packages in rpmdb (RHEL-35619)
- Fix a hard link race condition in brp-strip (RHEL-74011)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-39" date="1755691200">- Allow an optional "override clock" for deterministic timestamps (RHEL-106672)</changelog>
  <changelog author="Michal Domonkos &lt;mdomonko@redhat.com&gt; - 4.16.1.3-40" date="1763726400">- Improve error handling on keystore load (RHEL-114837)
- Sort files before passing to file attr dependency generators (RHEL-95376)</changelog>
</package>
<package pkgid="abc63214e08038c391cd25fec54e0d51ae07bd9ab8bc90ed6280e886f79703b9" name="rteval" arch="noarch">
  <version epoch="0" ver="3.10" rel="1.el9"/>
  <changelog author="Crystal Wood &lt;crwood@redhat.com&gt; - 3.8-5" date="1722254400">- Prevent using cyclictest and timerlat and the same time
- Add a --noload option
- Switch to autosetup, picking up the updates that should have been in 3.8-4
Resolves: RHEL-35506
Resolves: RHEL-50323</changelog>
  <changelog author="Anubhav Shelat &lt;ashelat@redhat.com&gt; - 3.8-6" date="1722945600">- Add functionality to allow user to execute cpupower tool to
set idle state depth  while running rteval.
- Disable latency trick by using --default-system option with
cyclictest when setting idle state depth.
Resolves: RHEL-37645</changelog>
  <changelog author="Tomas Glozar &lt;tglozar@redhat.com&gt; - 3.8-7" date="1723464000">- Collect tuned state in sysinfo
Resolves: RHEL-33303</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 3.8-8" date="1729857600">- Update the kcompile kernel to linux-6.12-rc4
Resolves: RHEL-63621</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 3.9-1" date="1731585600">- Rebase to upstream rteval-v3.9
Resolves: RHEL-63519</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 3.9-2" date="1734091200">- Fix missing system statistics
Resolves: RHEL-70166</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 3.9-3" date="1738929600">- Make the default interval for timerlat in rteval 1100us
- Make cyclictest the default measurement module for rteval
Resolves: RHEL-78394</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 3.9-4" date="1750248000">- Fix syntax warning when using python &gt;=3.12
Resolves: RHEL-97825</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 3.9-5" date="1750334400">- Make timerlat the default measurement module
- Make the default interval 100us
Resolves: RHEL-97540</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 3.10-1" date="1763553600">- Rebase to upstream rteval-3.10
Resolves: RHEL-82914, RHEL-111000, RHEL-114928</changelog>
</package>
<package pkgid="43cae06186563658154b9b6b1f3019f422bd2b54021bd7cb5c4ac232d0c950cc" name="rteval-loads" arch="noarch">
  <version epoch="0" ver="6.17.7" rel="2.el9"/>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 1.6-5" date="1729857600">- Upgrade the kernel to linux-6.12-rc4
Resolves: RHEL-63614</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 1.6-6" date="1731672000">- Rebuild to go through gating
Resolves: RHEL-67848</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 6.17.7-1" date="1763121600">- Changed the kernel version to 6.17.7
- changed the rteval-loads number scheme to reflect the kernel version
Resolves: RHEL-86701</changelog>
  <changelog author="John Kacur &lt;jkacur@redhat.com&gt; - 6.17.7-2" date="1763553600">- Rebuid in a side tag in order to sync with rteval
Resolves: RHEL-86701</changelog>
</package>
<package pkgid="363c52c07eef7b45010bc88e03fabe200bdc2d7641cbb00e9ccf7a2689749de5" name="ruby-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="4.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-3" date="1712664000">- Some static analysis fixes for unitialized structs
  Resolves: RHEL-25498
- Fix a memory leak in parse_package() of repo conda (RHEL-25496)</changelog>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
</package>
<package pkgid="8b9d522a82a0fab95322870321613328ee33c685961fa51c90ba7563eba63f06" name="ruby-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="5.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
</package>
<package pkgid="1c4e44ba70b219ddc37ee0d768ba71acb362647e1678164e8e45a015608059dc" name="ruby-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="6.el9_8"/>
  <changelog author="Evan Goode &lt;egoode@redhat.com&gt; - 0.7.24-4" date="1769083200">- Backport "Implement color filtering when adding update targets"
  Resolves: RHEL-103995</changelog>
  <changelog author="Marek Blaha &lt;mblaha@redhat.com&gt; - 0.7.24-5" date="1776859200">- Backport "choice rules: also do solver_choicerulecheck for package downgrades"
  Resolves: RHEL-141449</changelog>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 0.7.24-6" date="1780660800">- Fix a buffer overflow when decompressing solv pages (CVE-2026-48864)
  (RHEL-178982)</changelog>
</package>
<package pkgid="ba96104da07c9518b5d099c6f71a6a7cc4f7b976eccae200c7bcd4cc0184fd96" name="rubygem-abrt" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="1.module_el9.8.0+288+22f1c9f2"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 0.3.0-4" date="1533038400">- Execute test suite unconditionally.
- Upload correct sources.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 0.4.0-1" date="1593000000">- Update to abrt 0.4.0.
  Resolves: rhbz#1842476</changelog>
</package>
<package pkgid="00e9a22ce7fc6e3182e1a081be1ec9d40b39f74dd7643c2a03d648393a3d6188" name="rubygem-abrt-doc" arch="noarch">
  <version epoch="0" ver="0.4.0" rel="1.module_el9.8.0+288+22f1c9f2"/>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 0.3.0-4" date="1533038400">- Execute test suite unconditionally.
- Upload correct sources.</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 0.4.0-1" date="1593000000">- Update to abrt 0.4.0.
  Resolves: rhbz#1842476</changelog>
</package>
<package pkgid="3f2d1f02fa208a7f7bd00058a866fc985a0aed6c6b2abf2bbd127d71ec1b5950" name="rubygem-asciidoctor" arch="noarch">
  <version epoch="0" ver="2.0.12" rel="4.el9"/>
  <changelog author="Todd Zullinger &lt;tmz@pobox.com&gt; - 2.0.10-1" date="1569153600">- Update to Asciidoctor 2.0.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.10-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.10-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.10-4" date="1597838400">- Replace build time Erubis dependency by Erubi.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.10-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.12-1" date="1611748801">- Update to asciidoctor 2.0.12.
  Resolves: rhbz#1893940</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.12-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.12-3" date="1623412800">- Enable test suite.
  Resolves: rhbz#1970776</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.12-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="95e89984e777f2c82ff263ba2ff6654a97b6e39ab1c9aa37fb41935e241b3c69" name="rubygem-asciidoctor-doc" arch="noarch">
  <version epoch="0" ver="2.0.12" rel="4.el9"/>
  <changelog author="Todd Zullinger &lt;tmz@pobox.com&gt; - 2.0.10-1" date="1569153600">- Update to Asciidoctor 2.0.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.10-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.10-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.10-4" date="1597838400">- Replace build time Erubis dependency by Erubi.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.10-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 2.0.12-1" date="1611748801">- Update to asciidoctor 2.0.12.
  Resolves: rhbz#1893940</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.12-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.0.12-3" date="1623412800">- Enable test suite.
  Resolves: rhbz#1970776</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.0.12-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6da495e8c5c8d9e9b3f33ec0a451428b08ef48c817d3aca14ed7e5881b8b1065" name="rubygem-coderay" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 1.1.3-1" date="1614600000">- update to new version
  Resolves: rhbz#1842013
  Resolves: rhbz#1923366</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.1.3-2" date="1621857600">- Conditionaly disable `BR: rubygem(shoulda-context)`.
  Resolves: rhbz#1937981</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c04d21493e04376f389e0ffa91889a1cb20edec3db4180ae93c9b6eb6a96d572" name="rubygem-coderay-doc" arch="noarch">
  <version epoch="0" ver="1.1.3" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jun Aruga &lt;jaruga@redhat.com&gt; - 1.1.3-1" date="1614600000">- update to new version
  Resolves: rhbz#1842013
  Resolves: rhbz#1923366</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.1.3-2" date="1621857600">- Conditionaly disable `BR: rubygem(shoulda-context)`.
  Resolves: rhbz#1937981</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.3-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ab4e933b2e1b5edf6546d104566dd69e4694b8e3d8118919ed7a77940b23ac38" name="rubygem-diff-lcs-doc" arch="noarch">
  <version epoch="0" ver="1.3" rel="12.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-8" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-9" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-10" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3-12" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="53cbab5e7aa597970181b44825c90d15c56b0c04ffed91f311546e9eb735abd0" name="rubygem-kramdown" arch="noarch">
  <version epoch="0" ver="2.3.1" rel="5.el9"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 2.2.1-8" date="1611403200">- Wrap rexml depedency with fedora release
- Add upstream patch for rouge change
- Add upstream patch to silence warnings from minitest</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.1-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 2.3.0-1" date="1612180800">- 2.3.0
- Speficy rouge version dependency for test suite</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 2.3.0-2" date="1613476800">- Use recent packaging style</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 2.3.0-3" date="1616328000">- Apply upstream fix for CVE-2021-28834 (rouge formatter namespace restriction)</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 2.3.0-1" date="1616328001">- 2.3.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.3.1-3" date="1620907200">- Drop Latex test cases and disable stringex dependency.
  Resolves: rhbz#1951246</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.3.1-4" date="1621944000">- Drop `tidy` dependency.
  Related: rhbz#1951246</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.1-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="06bfa5dad1ba5851ca53ebe08735a66894898b7f762d15471e892218d7409982" name="rubygem-kramdown-doc" arch="noarch">
  <version epoch="0" ver="2.3.1" rel="5.el9"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 2.2.1-8" date="1611403200">- Wrap rexml depedency with fedora release
- Add upstream patch for rouge change
- Add upstream patch to silence warnings from minitest</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.1-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 2.3.0-1" date="1612180800">- 2.3.0
- Speficy rouge version dependency for test suite</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 2.3.0-2" date="1613476800">- Use recent packaging style</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 2.3.0-3" date="1616328000">- Apply upstream fix for CVE-2021-28834 (rouge formatter namespace restriction)</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 2.3.0-1" date="1616328001">- 2.3.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.3.1-3" date="1620907200">- Drop Latex test cases and disable stringex dependency.
  Resolves: rhbz#1951246</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 2.3.1-4" date="1621944000">- Drop `tidy` dependency.
  Related: rhbz#1951246</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.1-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b8e234205dc6c9be834209205cb998ff67c0bb9c4e8ab12f8fcfb621e059df84" name="rubygem-kramdown-parser-gfm" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="9.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.1.0-1" date="1566820800">- Initial package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.1.0-5" date="1597492800">- Include upstream patch to make test suite compatible with kramdown 2.2.0.
- Fixes RHBZ#1865414</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.1.0-8" date="1622721600">- Bump and rebuild after unretiring the package.
  Related: rhbz#1943532</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1ddf23c02939039181a58d9081889e039c64f412b80f354bc47310adfa67be51" name="rubygem-kramdown-parser-gfm-doc" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="9.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.1.0-1" date="1566820800">- Initial package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-4" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.1.0-5" date="1597492800">- Include upstream patch to make test suite compatible with kramdown 2.2.0.
- Fixes RHBZ#1865414</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.1.0-8" date="1622721600">- Bump and rebuild after unretiring the package.
  Related: rhbz#1943532</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.0-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fbb2aa56c7cc6d3e9ff1b692ad6540bad806867a40c1c43ec61f9fb2865be839" name="rubygem-mustache" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-10" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.1.1-1" date="1587988800">- Update to Mustache 1.1.1.
  Resolves: rhbz#1321203
  Resolves: rhbz#1800018</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="cf61474b6f39a926d86210df040cb5573a7d16940433d8b0ff8c27553b52052f" name="rubygem-mustache-doc" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-10" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.1.1-1" date="1587988800">- Update to Mustache 1.1.1.
  Resolves: rhbz#1321203
  Resolves: rhbz#1800018</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1f801d9df5c6062e201ea31f676a6e8f8778301bf7f9c1e248940677ea3f79db" name="rubygem-nokogiri" arch="aarch64">
  <version epoch="0" ver="1.11.2" rel="3.el9.1"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.11.0-0.1.rc4" date="1609416000">- 1.11.0.rc4</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.11.0-1" date="1609934400">- 1.11.0</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.11.0-1.1" date="1609934401">- F-34: rebuild against ruby 3.0</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.11.1-1" date="1610107200">- 1.11.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.1-1.1" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.11.2-1" date="1615550400">- 1.11.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11.2-1.1" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.11.2-2" date="1620388800">- Remove rubygem(minitest-reporters) dependency.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.11.2-3" date="1627473600">- Fix test suite compatibility with libxml 2.9.12.
  Resolves: rhbz#1980885</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11.2-3.1" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="73e4cc1ae1a34c321e8d2ca4fbc444a2334cb04620de65b57e179b164890f147" name="rubygem-nokogiri-doc" arch="aarch64">
  <version epoch="0" ver="1.11.2" rel="3.el9.1"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.11.0-0.1.rc4" date="1609416000">- 1.11.0.rc4</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.11.0-1" date="1609934400">- 1.11.0</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.11.0-1.1" date="1609934401">- F-34: rebuild against ruby 3.0</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.11.1-1" date="1610107200">- 1.11.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.1-1.1" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.11.2-1" date="1615550400">- 1.11.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11.2-1.1" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.11.2-2" date="1620388800">- Remove rubygem(minitest-reporters) dependency.</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 1.11.2-3" date="1627473600">- Fix test suite compatibility with libxml 2.9.12.
  Resolves: rhbz#1980885</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.11.2-3.1" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="97efeb8343bee1675ed11afb0f457c760f12a133fa82fb1c1d26ec20ef19baf1" name="rubygem-openwsman-doc" arch="noarch">
  <version epoch="0" ver="2.8.1" rel="2.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.6.8-24" date="1760443200">- Update OpenSSL certificates set up
  Resolves: RHEL-118292</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.8.1-1" date="1761220800">- Update to openwsman-2.8.1
  Resolves: RHEL-97643
- Add libwsman-client.so.4 for backward compatibility
  Related: RHEL-97643</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2.8.1-2" date="1770206400">- Support added for post-quantum cryptography
  Resolves: RHEL-127516
- Fix bogus 'sscg' arguments
  Related: RHEL-118292</changelog>
</package>
<package pkgid="156d9a6be56308101debb46ea43069ad0d5bd3470aec8d7d7a06ef9444a358c2" name="rubygem-racc" arch="aarch64">
  <version epoch="0" ver="1.5.2" rel="203.el9"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.4.16-1" date="1577707200">- 1.4.16</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.4.16-200" date="1579262400">- F-32: rebuild against ruby27</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.16-201" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.5.0-200" date="1587470400">- 1.5.0
- racc2y, y2racc removed</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-201" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.5.1-200" date="1605614400">- 1.5.1</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.5.2-200" date="1609934400">- 1.5.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-201" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.2-202" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.2-203" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ef6919a56e7124ce86f772035f6ec2559157936cdb2747f76fe6436843856473" name="rubygem-racc-doc" arch="noarch">
  <version epoch="0" ver="1.5.2" rel="203.el9"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.4.16-1" date="1577707200">- 1.4.16</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.4.16-200" date="1579262400">- F-32: rebuild against ruby27</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.16-201" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.5.0-200" date="1587470400">- 1.5.0
- racc2y, y2racc removed</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.0-201" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.5.1-200" date="1605614400">- 1.5.1</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 1.5.2-200" date="1609934400">- 1.5.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.5.2-201" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.2-202" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.2-203" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fee151312173c1354809a6d8b366bf46021ca4ecb1303cb7a55a1d73d8a43947" name="rubygem-ronn-ng" arch="noarch">
  <version epoch="0" ver="0.9.1" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.3-15" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.3-16" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.9.1-1" date="1598011200">- Switch to https://github.com/apjanke/ronn-ng/ upstream fork (#1817168)
- Regenerate spec file with gem2rpm.</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.9.1-1" date="1600516800">- Add BRs for tests, enable tests in %check.
- Require /usr/bin/groff, not the package in case the file is moved.
- Keep the license file in the original location.
- Adjust various macros and invocations.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f6c48af4861dbc5acaa022852798e288b6c95d8de17a0fff4495bd491c1e12a7" name="rubygem-ronn-ng-doc" arch="noarch">
  <version epoch="0" ver="0.9.1" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.3-15" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.3-16" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.9.1-1" date="1598011200">- Switch to https://github.com/apjanke/ronn-ng/ upstream fork (#1817168)
- Regenerate spec file with gem2rpm.</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.9.1-1" date="1600516800">- Add BRs for tests, enable tests in %check.
- Require /usr/bin/groff, not the package in case the file is moved.
- Keep the license file in the original location.
- Adjust various macros and invocations.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.9.1-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b2f74abcb72fdd015e49bc0a7e8002fcc17014af819e7146ddb0a4e1ea8c7425" name="rubygem-rouge" arch="noarch">
  <version epoch="0" ver="3.26.0" rel="4.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.21.0-1" date="1594814400">- Update to version 3.21.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.21.0-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.22.0-1" date="1597233600">- Update to version 3.22.0.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.23.0-1" date="1599652800">- Update to version 3.23.0.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.24.0-1" date="1602849600">- Update to version 3.24.0.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.25.0-1" date="1605700800">- Update to version 3.25.0.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.26.0-1" date="1607688000">- Update to version 3.26.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.26.0-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.26.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.26.0-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="599792da69062c402dc84203d91599afefb03cfd91bcf5d2bafdf7667d9b2ac0" name="rubygem-rouge-doc" arch="noarch">
  <version epoch="0" ver="3.26.0" rel="4.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.21.0-1" date="1594814400">- Update to version 3.21.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.21.0-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.22.0-1" date="1597233600">- Update to version 3.22.0.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.23.0-1" date="1599652800">- Update to version 3.23.0.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.24.0-1" date="1602849600">- Update to version 3.24.0.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.25.0-1" date="1605700800">- Update to version 3.25.0.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 3.26.0-1" date="1607688000">- Update to version 3.26.0.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.26.0-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.26.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.26.0-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="841f31b88ab3323a1b246fa4e89f64ed1be044fa1f680f08c1a9adcc0633f19f" name="rubygem-rspec-core-doc" arch="noarch">
  <version epoch="0" ver="3.10.1" rel="7.el9.1"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.0-1" date="1607688000">- Enable tests again</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.1-1" date="1609243200">- 3.10.1</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.1-2" date="1611662400">- Ruby 3.0: Disable failing cucumber suite for now</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.1-3" date="1613563200">- rr 1.2.1: Disable failing cucumber suite for now</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.1-4" date="1614513600">- Add conditional for eln</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 3.10.1-5" date="1616068800">- Make test suite green.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.1-5.1" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="V&#xED;t Ondruch &lt;vondruch@redhat.com&gt; - 3.10.1-6" date="1619179200">- Disable integration test suite to cut down the dependency tree.
  Resolves: rhbz#1952842</changelog>
  <changelog author="Pavel Valena &lt;pvalena@redhat.com&gt; - 3.10.1-7" date="1626350400">- Re-add Requires: rubygem(rake), as it's needed for runtime.
  Resolves: rhbz#1982410
  Resolves: rhbz#1982419</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.1-7.1" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e04074fe54b254c915de6c39568916476c584e145294d6b79769b0bebdfdec5f" name="rubygem-rspec-doc" arch="noarch">
  <version epoch="0" ver="3.10.0" rel="4.el9"/>
  <changelog author="amoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.9.0-1" date="1575979200">- 3.9.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-2" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.0-1" date="1607688000">- 3.10.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.0-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.0-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.0-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e89a66f5b498d9364db2d69b891f8f7f7d6fc96b53ed797634505195cf6ad779" name="rubygem-rspec-expectations-doc" arch="noarch">
  <version epoch="0" ver="3.10.1" rel="1.el9.3"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.0-2.1" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.9.1-1" date="1587297600">- 3.9.1</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.9.2-1" date="1589025600">- 3.9.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.2-1.1" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.0-0.1" date="1607688000">- 3.10.0
- Once disable test for bootstrap</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.0-1" date="1607688001">- Enable tests again</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.1-1" date="1609243200">- 3.10.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.1-1.1" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.1-1.2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.1-1.3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="109ed48c3e8a2f0b3ad4f25542402e9221405e686fa24a7ef3459261ec9c2a7e" name="rubygem-rspec-mocks-doc" arch="noarch">
  <version epoch="0" ver="3.10.2" rel="1.el9.2"/>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.9.1-1" date="1577966400">- 3.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.1-1.1" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.1-1.2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.0-0.1" date="1607688000">- 3.10.0
- Once disable test for bootstrap</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.0-1" date="1607688001">- Enable tests again</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.1-1" date="1609243200">- 3.10.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.1-1.1" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.2-1" date="1612180800">- 3.10.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.2-1.1" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.2-1.2" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="61415e96bc879b51fded789437f67613f458b8545d42c65d14bf528f44e0ac86" name="rubygem-rspec-support-doc" arch="noarch">
  <version epoch="0" ver="3.10.2" rel="1.el9.2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.2-1.1" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.9.3-1" date="1588507200">- 3.9.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.9.3-1.1" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.0-0.1" date="1607688000">- 3.10.0
- Once disable test for bootstrap</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.0-1" date="1607688001">- Enable tests again</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.1-1" date="1609243200">- 3.10.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.10.1-1.1" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 3.10.2-1" date="1612180800">- 3.10.2</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.2-1.1" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.10.2-1.2" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="1c813d61ff9071267846759e3d488a7a4256d22b11035f525590f19f85b465d7" name="rubygem-thread_order-doc" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.1-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c05859a84da7472e33064e58da36851fe6a09770d20ce8972704238feadca01a" name="rust-packaging" arch="aarch64">
  <version epoch="0" ver="17" rel="5.el9"/>
  <changelog author="Josh Stone &lt;jistone@redhat.com&gt; - 13-3" date="1580731200">- Use 'cargo install --no-track' with cargo 1.41</changelog>
  <changelog author="Igor Raits &lt;ignatenkobrain@fedoraproject.org&gt; - 14-1" date="1588420800">- Update to 14</changelog>
  <changelog author="Igor Raits &lt;ignatenkobrain@fedoraproject.org&gt; - 15-1" date="1590148800">- Update to 15</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 15-2" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 15-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Igor Raits &lt;ignatenkobrain@fedoraproject.org&gt; - 17-1" date="1608984000">- Update to 17</changelog>
  <changelog author="Igor Raits &lt;ignatenkobrain@fedoraproject.org&gt; - 17-2" date="1609156800">- Band-aid clap pre-release version</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 17-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 17-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 17-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="0a915193ca0f627beab919f31b1aab03044a8a581ec8ce25946f77a9a5c74900" name="sac" arch="noarch">
  <version epoch="0" ver="1.3" rel="37.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-32" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-33" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-34" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-35" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3-36" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3-37" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="034adea4bb99cec70db7680d8175cf06f17d0a62b0d7f5deff4aa805b466a175" name="sac-javadoc" arch="noarch">
  <version epoch="0" ver="1.3" rel="37.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-32" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.3-33" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-34" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3-35" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3-36" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3-37" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e7f3f9dea9de872684250be68d58a5493087a5c3f0c1660066108032757e03cc" name="satyr-devel" arch="aarch64">
  <version epoch="0" ver="0.38" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.30-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 0.31-1" date="1597752000">- Remove #define PyString_AsString PyUnicode_AsUTF8
- python: Adapt to changes made in PEP 590</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; 0.35-1" date="1606824000">- New upstream version
 - Fix leaks in koops stacktrace- and report-handling code
 - Replace utility code with GLib functions
 - Fix unit test portability issue
 - Add build dependency on make</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 0.35-2" date="1610366400">- Add fix for https://bugzilla.redhat.com/show_bug.cgi?id=1898063</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; 0.36-1" date="1610452800">- New upstream version
 - Fix builds with python3.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.36-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.36-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; 0.38-1" date="1624017600">- New upstream version
 - lib: Use GLib for computing SHA-1 digests
 - sr_distances_cluster_objects: Check arg safety</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.38-2" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Fabik &lt;mfabik@redhat.com&gt; - 0.38-3" date="1639137600">- Rebuild against json-c-0.14-11
  Related: rhbz#2023326</changelog>
</package>
<package pkgid="59fe461bd54fa079a14385e4fc9d68548c967ee2aedb94c22d2b73abd428b31b" name="sbd-tests" arch="aarch64">
  <version epoch="0" ver="1.5.2" rel="1.el9"/>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.5.0-1" date="1625572800">- sync with fedora sbd-1.5.0-1
  Resolves: rhbz#1979961
  Resolves: rhbz#1979573</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.5.0-2" date="1625832000">- properly conflict with pacemaker not providing sync-default we need
  Resolves: rhbz#1979961
  Resolves: rhbz#1979573</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.5.0-2.1" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.5.1-1" date="1638360000">- rebase to upstream v1.5.1

  Resolves: rhbz#2013261</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.5.1-2" date="1638792000">- obviously autoconf is defining runstatedir - but with a
  wrong default - directly hand it over to configure
  and skip --with-runstatedir implemented in configure.ac
  for older versions of autoconf

  Resolves: rhbz#2011707</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.5.1-3" date="1658145600">- Be a bit more descriptive on issues opening watchdog-devices

  Resolves: rhbz#2108122</changelog>
  <changelog author="Klaus Wenninger &lt;kwenning@redhat.com&gt; - 1.5.2-1" date="1684843200">- rebase to upstream v1.5.2
- convert license naming to SPDX
- make static analysis happy with a few checks &amp; rearanges with
  dynamic-memory-management

  Resolves: rhbz#2168579</changelog>
</package>
<package pkgid="a3864eccd24d24af8533c6bfa8fe3d9ff26129e421578ebb8c0f6889f0c75bea" name="sblim-cmpi-base-devel" arch="aarch64">
  <version epoch="0" ver="1.6.4" rel="21.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.6.4-21" date="1765454400">- Add support for Image Mode
  Resolves: RHEL-132483</changelog>
</package>
<package pkgid="b07ce084871d11af557a92f6b438f45d6553220bd0ec93afe2c4151f26718593" name="sblim-cmpi-base-test" arch="aarch64">
  <version epoch="0" ver="1.6.4" rel="20.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.6.4-14" date="1579694400">- Fix getting of InstallDate property, improve it to work on non en_US locales
  and update support for recent Fedora distributions</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-15" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1.6.4-16" date="1580817600">- Fix possible null pointer dereferences after strstr calls</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-17" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.4-18" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.4-19" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.4-20" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="ce5190afe2b50038cb6fbf6b257a1b48e12d49368df06f7b21d195b5aa85c16f" name="sblim-indication_helper-devel" arch="aarch64">
  <version epoch="0" ver="0.5.0" rel="8.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-3" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 0.5.0-5" date="1606392000">- Use make macros, patch by Tom Stellard &lt;tstellar@redhat.com&gt;</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.5.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.5.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.5.0-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a0d81a05d12b0518dd969390dee02d91906acb7689d174bd903f567c2397c0ef" name="sblim-sfcCommon-devel" arch="aarch64">
  <version epoch="0" ver="1.0.1" rel="19.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-15" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-16" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.1-17" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.1-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.1-19" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="52a0ad0846d299f199fe42230421ed147a0d3f6186e93c711f576e60fcf0a3be" name="sbsigntools" arch="aarch64">
  <version epoch="0" ver="0.9.4" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.4-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 0.9.4-4" date="1621252800">- don't ignore errors from sbkeysync (fixes rhbz#1955828)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.4-5" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Sahana Prasad &lt;sahana@redhat.com&gt; - 0.9.4-6" date="1631620800">- Rebuilt with OpenSSL 3.0.0</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 0.9.4-7" date="1637323200">- fix build with OpenSSL 3.0.0 (fixes rhbz#2021909)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.4-8" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.4-9" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 0.9.4-10" date="1673956800">- fix build with GCC 13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.4-11" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
</package>
<package pkgid="c9975f6aebaa80f8d1b7e0d66e146b6f08705a1efc91f2071d6e74f723bb4607" name="scap-security-guide-rule-playbooks" arch="noarch">
  <version epoch="0" ver="0.1.80" rel="1.el9_7.alma.1"/>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.74-1" date="1723204800">- Rebase to a new upstream release 0.1.74 (RHEL-53865)
- Ensure authselect features are preserved by enable_authselect rule (RHEL-39383)
- Fix check for passwords last changed date (RHEL-47129)
- Remediations of Journald configuration files now include a correct section (RHEL-38531)
- Adjust service requirements for CIS profiles (RHEL-23852)
- Update password hashing settings for ANSSI-BP-028 (RHEL-44983)</changelog>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.75-1" date="1731672000">- Rebase to new release (RHEL-66154)
- the rule sshd_use_priv_separation is no longer used (RHEL-66057)
- add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005)
- remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426)
- Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018)
- Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.76-1" date="1740484800">- rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240)
- modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936)
- make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120)
- align checking of approved SSH ciphers with latest STIG policy (RHEL-65432)</changelog>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.77-1" date="1748952000">- Rebase to scap-security-guide version 0.1.77 (RHEL-94803)
- rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843)
- rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731)
- improve checking of Grub2 superuser and password configuration (RHEL-58818)</changelog>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.77-2" date="1749211200">- Turn on SCE for this release (RHEL-94803)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.77-3" date="1751025600">- fix incorrect applicability of Grub2 UEFI specific rules
- replace grub-mkconfig with grub2-mkconfig in rule descriptions</changelog>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.78-1" date="1757592000">- rebase scap-security-guide package to version 0.1.78 (RHEL-118557)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.79-1" date="1765800000">- Update to the latest upstream release (RHEL-135773)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.80-1" date="1773230400">- Fix inconsistent and missing audit keys in some audit rules (RHEL-141394)
- Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201)
- Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448)
- Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549)
- Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737)
- Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941)
- Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 0.1.80-1.alma.1" date="1774958400">- Add AlmaLinux 9 support</changelog>
</package>
<package pkgid="b2c1a3c3f2cbc79c6c0d21a09fb7ef66b7e253de5743b5e12c8d78f2934ecadc" name="scap-security-guide-rule-playbooks" arch="noarch">
  <version epoch="0" ver="0.1.80" rel="1.el9_7.alma.2"/>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.74-1" date="1723204800">- Rebase to a new upstream release 0.1.74 (RHEL-53865)
- Ensure authselect features are preserved by enable_authselect rule (RHEL-39383)
- Fix check for passwords last changed date (RHEL-47129)
- Remediations of Journald configuration files now include a correct section (RHEL-38531)
- Adjust service requirements for CIS profiles (RHEL-23852)
- Update password hashing settings for ANSSI-BP-028 (RHEL-44983)</changelog>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.75-1" date="1731672000">- Rebase to new release (RHEL-66154)
- the rule sshd_use_priv_separation is no longer used (RHEL-66057)
- add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005)
- remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426)
- Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018)
- Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.76-1" date="1740484800">- rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240)
- modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936)
- make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120)
- align checking of approved SSH ciphers with latest STIG policy (RHEL-65432)</changelog>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.77-1" date="1748952000">- Rebase to scap-security-guide version 0.1.77 (RHEL-94803)
- rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843)
- rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731)
- improve checking of Grub2 superuser and password configuration (RHEL-58818)</changelog>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.77-2" date="1749211200">- Turn on SCE for this release (RHEL-94803)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.77-3" date="1751025600">- fix incorrect applicability of Grub2 UEFI specific rules
- replace grub-mkconfig with grub2-mkconfig in rule descriptions</changelog>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.78-1" date="1757592000">- rebase scap-security-guide package to version 0.1.78 (RHEL-118557)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.79-1" date="1765800000">- Update to the latest upstream release (RHEL-135773)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.80-1" date="1773230400">- Fix inconsistent and missing audit keys in some audit rules (RHEL-141394)
- Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201)
- Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448)
- Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549)
- Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737)
- Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941)
- Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 0.1.80-1.alma.2" date="1781006400">- Add AlmaLinux 9 support</changelog>
</package>
<package pkgid="914ea52869546c049dd97856d6aa90fd27f98ff671f06a2d07200e4966dff6e3" name="scap-security-guide-rule-playbooks" arch="noarch">
  <version epoch="0" ver="0.1.81" rel="1.el9_8.alma.1"/>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.75-1" date="1731672000">- Rebase to new release (RHEL-66154)
- the rule sshd_use_priv_separation is no longer used (RHEL-66057)
- add a rule checking for presence of chrony to CIS RHEL 9 profile (RHEL-60005)
- remediation of Networkmanager DNS mode now remediates value "default" (RHEL-53426)
- Adjust mount_option_nodev_nonroot_local_partitions to work in Image Builder environments. (RHEL-45018)
- Adjusted rules related to sshd ensure constancy in checked values and ensure that drop in configuration files are checked. (RHEL-38206)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.76-1" date="1740484800">- rebase scap-security-guide to the latest upstream version 0.1.76 (RHEL-74240)
- modify the rule require_singleuser_auth to honor overriding mechanism offered by Systemd (RHEL-71936)
- make the rule sysctl_user_max_user_namespaces informational and unscored in RHEL 9 STIG profile (RHEL-40120)
- align checking of approved SSH ciphers with latest STIG policy (RHEL-65432)</changelog>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.77-1" date="1748952000">- Rebase to scap-security-guide version 0.1.77 (RHEL-94803)
- rule networkmanager_dns_mode now checks dropin files and has more resilient regex (RHEL-62843)
- rsyslog_remote_loghost checks for Rainer Script syntax as well (RHEL-62731)
- improve checking of Grub2 superuser and password configuration (RHEL-58818)</changelog>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.77-2" date="1749211200">- Turn on SCE for this release (RHEL-94803)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.77-3" date="1751025600">- fix incorrect applicability of Grub2 UEFI specific rules
- replace grub-mkconfig with grub2-mkconfig in rule descriptions</changelog>
  <changelog author="Matthew Burket &lt;mburket@redhat.com&gt; - 0.1.78-1" date="1757592000">- rebase scap-security-guide package to version 0.1.78 (RHEL-118557)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.79-1" date="1765800000">- Update to the latest upstream release (RHEL-135773)</changelog>
  <changelog author="Vojtech Polasek &lt;vpolasek@redhat.com&gt; - 0.1.80-1" date="1773230400">- Fix inconsistent and missing audit keys in some audit rules (RHEL-141394)
- Modify shipped kickstart files so that the size of boot partition aligns with official recommended size (RHEL-145201)
- Disable SHA-1 for the RPM component in RHEL 9 CIS profiles (RHEL-138448)
- Use correct permissions and consider the log_group option in rules file_permissions_var_log_audit and directory_permissions_var_log_audit (RHEL-138549)
- Rule configure_ssh_crypto_policy has been removed from RHEL 9 and RHEL 10 profiles. (RHEL-65737)
- Rules of type sshd_use_strong_kex have been removed from RHEL CIS profiles in favor of system wide crypto policies usage. (RHEL-62941)
- Rebase scap-security-guide to the latest upstream version 0.1.80 (RHEL-136121)</changelog>
  <changelog author="Jan &#x10C;ern&#xFD; &lt;jcerny@redhat.com&gt; - 0.1.81-1" date="1780315200">- rule rsyslog_remote_access_monitoring handles Rainer syntax objects as case insensitive (RHEL-171951)
- Fixed remediation problems occurring when authselect profiles contain multiple authselect features (RHEL-165050)
- Rebase scap-security-guide to 0.1.81 (RHEL-180787)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 0.1.81-1.alma.1" date="1782129600">- Add AlmaLinux 9 support</changelog>
</package>
<package pkgid="e2db35b049dc7064441bd9ec4491a1e4f1554bca5f083efd1418044352b3ba82" name="scpio" arch="aarch64">
  <version epoch="0" ver="1.6" rel="6.el9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.6-1" date="1569240000">- new upstream release
- drop WITH_SELINUX knob and selinux patches, there's built-in support now
- drop several patches which were incorporated upstream, except for
  changewarnSegv patch (did not apply, and not needed nowadays)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="6ef3bb20eba583945c62e23afdc965694fce352146ecc3e44bdabe78b28aed34" name="secvarctl" arch="aarch64">
  <version epoch="0" ver="1.1.0" rel="1.el9"/>
  <changelog author="Marta Lewandowska &lt;mlewando@redhat.com&gt; - 1.1.0-1" date="1753099200">- Initial commit of secvarctl on c9s</changelog>
</package>
<package pkgid="1cd2819ba23328f78b8e083bf9f9e47b334596b24aa288d77c8cd4aa4123174f" name="selinux-policy-automotive" arch="noarch">
  <version epoch="0" ver="38.1.75" rel="2.el9_8"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.68-1" date="1763121600">- Allow insights-client manage /etc symlinks
Resolves: RHEL-108826
- Allow insights-client get attributes of the rpm executable
Resolves: RHEL-127329
- Allow ras-mc-ctl get attributes of the kmod executable
Resolves: RHEL-103975
- Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
Resolves: RHEL-101155
- Allow bootupd delete symlinks in the /boot directory
Resolves: RHEL-101155
- Update policy for bootupd
Resolves: RHEL-101155
- Allow create kerberos files in postgresql db home
Resolves: RHEL-123225</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.69-1" date="1764331200">- Allow sysadm access to TPM
Resolves: RHEL-119055
- Update policy for dhcpc_hook_t
Resolves: RHEL-113941
- Allow stap server read virtual memory sysctls
Resolves: RHEL-114157
- Allow login_userdomain watch /home and /var directories
Resolves: RHEL-119686
- Allow login_userdomain read lastlog
Resolves: RHEL-119686
- Allow staff role read/write cockpit-session unix stream sockets
Resolves: RHEL-108068
- Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
Resolves: RHEL-113941</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.70-1" date="1765540800">- Add the rpm_signal() interface
Related: RHEL-108826
- Allow tuned_t use its private tmpfs files
Related: RHEL-108826
- Allow kdump search kdumpctl_tmp_t directories
Resolves: RHEL-66119</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.71-1" date="1768219200">- Revert "Allow NM nvme dispatcher script start systemd services"
Resolves: RHEL-111946
- Allow ssh_agent_type create a sockfile in /run/user/USERID
Resolves: RHEL-121936
- Allow NM nvme dispatcher script start systemd services
Resolves: RHEL-111946
- Allow aide get attributes of a filesystem with extended attributes
Resolves: RHEL-121480
- Label miscellaneous /dev/papr-* devices
Resolves: RHEL-129879</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.72-1" date="1769169600">- Add insights_client service interfaces
Related: RHEL-140893
- Confine rhc-worker-playbook.worker and rhc-playbook-verifier
Resolves: RHEL-132748
- Allow gpg manage rpm cache
Related: RHEL-108775
- Allow gpg read rpm cache
Related: RHEL-108775
- Allow aide get attributes of tmpfs and devtmpfs filesystems
Resolves: RHEL-121480
- Allow rules for confined users logged in plasma
Resolves: RHEL-133898
- Allow login_userdomain watch lnk_files in /usr
Resolves: RHEL-133898</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 38.1.72-2" date="1769515200">- Macros: Require only "stable" version of selinux-policy (RHEL-141433)</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.73-1" date="1769688000">- Add the fs_write_tmpfs_files() interface
Resolves: RHEL-142141
- Dontaudit aide the execmem permission
Resolves: RHEL-121480
- Update gpg policy for interactions with rhc-playbook-verifier
Resolves: RHEL-132748
- Allow rhc_playbook_verifier_t stream connect to itself
Resolves: RHEL-132748
- Update policy for rhc-worker-playbook
Resolves: RHEL-132748
- Allow traceroute_t bind rawip sockets to unreserved ports
Resolves: RHEL-130267
- Revert "Allow traceroute_t bind rawip sockets to unreserved ports"
Related: RHEL-130267
- Allow sudodomain connect to gkeyringd over a unix stream socket
Resolves: RHEL-121158
- Allow samba-bgqd send to smbd over a unix datagram socket
Resolves: RHEL-95985
- Allow ssh_agent_type manage generic cache home files
Resolves: RHEL-121165
- Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t
Resolves: RHEL-121165
- Allow boothd connect to systemd-machined over a unix socket
Resolves: RHEL-140882</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.74-1" date="1771848000">- Label /run/insights-client.ppid with insights_client_run_t
Resolves: RHEL-146688
- Update gpg_role() interface with unix_stream_socket permissions
Resolves: RHEL-128542</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.75-1" date="1772798400">- Allow nfsd_t domain setuid and setgid capability for rpc.mountd
Resolves: RHEL-148247</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.75-2" date="1773057600">- Rebuild with the target::exception flag
Resolves: RHEL-148247</changelog>
</package>
<package pkgid="e7727e6768d2cf12773e6b79e8fa43427d72d2c864aecc8560678e97b5435146" name="selinux-policy-minimum" arch="noarch">
  <version epoch="0" ver="38.1.75" rel="2.el9_8"/>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.68-1" date="1763121600">- Allow insights-client manage /etc symlinks
Resolves: RHEL-108826
- Allow insights-client get attributes of the rpm executable
Resolves: RHEL-127329
- Allow ras-mc-ctl get attributes of the kmod executable
Resolves: RHEL-103975
- Fix files_delete_boot_symlinks() to contain delete_lnk_files_pattern
Resolves: RHEL-101155
- Allow bootupd delete symlinks in the /boot directory
Resolves: RHEL-101155
- Update policy for bootupd
Resolves: RHEL-101155
- Allow create kerberos files in postgresql db home
Resolves: RHEL-123225</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.69-1" date="1764331200">- Allow sysadm access to TPM
Resolves: RHEL-119055
- Update policy for dhcpc_hook_t
Resolves: RHEL-113941
- Allow stap server read virtual memory sysctls
Resolves: RHEL-114157
- Allow login_userdomain watch /home and /var directories
Resolves: RHEL-119686
- Allow login_userdomain read lastlog
Resolves: RHEL-119686
- Allow staff role read/write cockpit-session unix stream sockets
Resolves: RHEL-108068
- Label /usr/libexec/dhcpcd-run-hooks with dhcpc_hook_exec_t
Resolves: RHEL-113941</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.70-1" date="1765540800">- Add the rpm_signal() interface
Related: RHEL-108826
- Allow tuned_t use its private tmpfs files
Related: RHEL-108826
- Allow kdump search kdumpctl_tmp_t directories
Resolves: RHEL-66119</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.71-1" date="1768219200">- Revert "Allow NM nvme dispatcher script start systemd services"
Resolves: RHEL-111946
- Allow ssh_agent_type create a sockfile in /run/user/USERID
Resolves: RHEL-121936
- Allow NM nvme dispatcher script start systemd services
Resolves: RHEL-111946
- Allow aide get attributes of a filesystem with extended attributes
Resolves: RHEL-121480
- Label miscellaneous /dev/papr-* devices
Resolves: RHEL-129879</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.72-1" date="1769169600">- Add insights_client service interfaces
Related: RHEL-140893
- Confine rhc-worker-playbook.worker and rhc-playbook-verifier
Resolves: RHEL-132748
- Allow gpg manage rpm cache
Related: RHEL-108775
- Allow gpg read rpm cache
Related: RHEL-108775
- Allow aide get attributes of tmpfs and devtmpfs filesystems
Resolves: RHEL-121480
- Allow rules for confined users logged in plasma
Resolves: RHEL-133898
- Allow login_userdomain watch lnk_files in /usr
Resolves: RHEL-133898</changelog>
  <changelog author="Vit Mojzis &lt;vmojzis@redhat.com&gt; - 38.1.72-2" date="1769515200">- Macros: Require only "stable" version of selinux-policy (RHEL-141433)</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.73-1" date="1769688000">- Add the fs_write_tmpfs_files() interface
Resolves: RHEL-142141
- Dontaudit aide the execmem permission
Resolves: RHEL-121480
- Update gpg policy for interactions with rhc-playbook-verifier
Resolves: RHEL-132748
- Allow rhc_playbook_verifier_t stream connect to itself
Resolves: RHEL-132748
- Update policy for rhc-worker-playbook
Resolves: RHEL-132748
- Allow traceroute_t bind rawip sockets to unreserved ports
Resolves: RHEL-130267
- Revert "Allow traceroute_t bind rawip sockets to unreserved ports"
Related: RHEL-130267
- Allow sudodomain connect to gkeyringd over a unix stream socket
Resolves: RHEL-121158
- Allow samba-bgqd send to smbd over a unix datagram socket
Resolves: RHEL-95985
- Allow ssh_agent_type manage generic cache home files
Resolves: RHEL-121165
- Label /usr/libexec/openssh/ssh-pkcs11-helper with ssh_agent_exec_t
Resolves: RHEL-121165
- Allow boothd connect to systemd-machined over a unix socket
Resolves: RHEL-140882</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.74-1" date="1771848000">- Label /run/insights-client.ppid with insights_client_run_t
Resolves: RHEL-146688
- Update gpg_role() interface with unix_stream_socket permissions
Resolves: RHEL-128542</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.75-1" date="1772798400">- Allow nfsd_t domain setuid and setgid capability for rpc.mountd
Resolves: RHEL-148247</changelog>
  <changelog author="Zdenek Pytela &lt;zpytela@redhat.com&gt; - 38.1.75-2" date="1773057600">- Rebuild with the target::exception flag
Resolves: RHEL-148247</changelog>
</package>
<package pkgid="dc742dafcc7b54e18057337de959ca3f7e64834cb1046d7da27de5136285b53c" name="sgx-rpm-macros" arch="noarch">
  <version epoch="0" ver="1" rel="2.el9"/>
  <changelog author="Daniel P. Berrang&#xE9; &lt;berrange@redhat.com&gt; - 1-1" date="1741953600">- Initial import</changelog>
</package>
<package pkgid="23d3561f734023831c49ffb5103474dcdf6a9d093d9c2c2ad538a62202f76b0d" name="sid-base-libs-devel" arch="aarch64">
  <version epoch="9" ver="0.0.4" rel="6.el9"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-1" date="1601985600">- Initial release.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-3" date="1611921600">- Sync with mpath_valid changes.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-4" date="1611921601">- Add epoch to rpm spec file for RHEL-based releases.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8:0.0.4-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8:0.0.4-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5d8443a0c6c63a6ccd7e8525536a3bcfe4b82cd449d1132ac8ef85f484a74604" name="sid-iface-libs-devel" arch="aarch64">
  <version epoch="9" ver="0.0.4" rel="6.el9"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-1" date="1601985600">- Initial release.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-3" date="1611921600">- Sync with mpath_valid changes.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-4" date="1611921601">- Add epoch to rpm spec file for RHEL-based releases.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8:0.0.4-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8:0.0.4-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fc6f516c85ca723c350d64befdd497e095f5116b1ff2610a3115449a54667ccc" name="sid-log-libs-devel" arch="aarch64">
  <version epoch="9" ver="0.0.4" rel="6.el9"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-1" date="1601985600">- Initial release.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-3" date="1611921600">- Sync with mpath_valid changes.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-4" date="1611921601">- Add epoch to rpm spec file for RHEL-based releases.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8:0.0.4-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8:0.0.4-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="534a518d2c4af1f33b2f52b6aa25fe8058e98d4ad7a5be2ea7c93f71767bde7f" name="sid-resource-libs-devel" arch="aarch64">
  <version epoch="9" ver="0.0.4" rel="6.el9"/>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-1" date="1601985600">- Initial release.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.0.4-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-3" date="1611921600">- Sync with mpath_valid changes.</changelog>
  <changelog author="Peter Rajnoha &lt;prajnoha@redhat.com&gt; - 0.0.4-4" date="1611921601">- Add epoch to rpm spec file for RHEL-based releases.</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8:0.0.4-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 8:0.0.4-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5ca24cc570aa1a0b9f1413b68465b3e0078492ba794864a1dca5360e6abe71d7" name="sil-padauk-book-fonts" arch="noarch">
  <version epoch="0" ver="3.003" rel="9.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.003-5" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.003-6" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.003-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.003-8" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.003-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2d844373b377f8062948b71cc9664760038591da1c83a46a3da378fb5646e7f1" name="sip-doc" arch="noarch">
  <version epoch="0" ver="4.19.25" rel="2.el9"/>
  <changelog author="Jan Grulich &lt;jgrulich@redhat.com&gt; - 4.19.25-2" date="1710331200">- Add py_ssize_t_clean module support for compatibility with python-qt5
  Resolves: RHEL-27554</changelog>
</package>
<package pkgid="abf1e1d4e5b15a9f78f5a797022647b31f6a49fc4566674d60f81cba3dee2417" name="sisu" arch="noarch">
  <version epoch="1" ver="0.3.5" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.4-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.4-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.4-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.4-6" date="1622548800">- Fix obsoletes on removed subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.4-7" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.4-8" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.4-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-1" date="1652097600">- Update to upstream version 0.3.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-2" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="1ed968bec268088df1535e70d3fbc9fbea3fd0e064f6158363c38d4c3d1d97fd" name="sisu" arch="noarch">
  <version epoch="1" ver="0.9.0~M3" rel="7.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-11" date="1706961600">- Add plexus-container-default alias</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.5-12" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.5-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-14" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-15" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.9.0~M3-1" date="1724155200">- Update to upstream version 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.9.0~M3-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="f92dc23b77fdb30cfb5225ec2f6f237a59461d84cd8f93a2a142345464e2925b" name="sisu-javadoc" arch="noarch">
  <version epoch="1" ver="0.3.4" rel="14.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.4-10" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:0.3.4-11" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:0.3.4-12" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:0.3.4-13" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1:0.3.4-14" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="3ea19a3f42d415f3ca8adad1e1d870235413164837153828f5242c1b0c8b6610" name="sisu-javadoc" arch="noarch">
  <version epoch="1" ver="0.3.5" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.4-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.4-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.4-5" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.4-6" date="1622548800">- Fix obsoletes on removed subpackages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.4-7" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.4-8" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.4-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-1" date="1652097600">- Update to upstream version 0.3.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-2" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="fda834a227024afe6b0a60fb1ac862edfa0cbfce0b4fcd4470e1694e0b720490" name="sisu-javadoc" arch="noarch">
  <version epoch="1" ver="0.3.5" rel="3.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.4-9" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-1" date="1652097600">- Update to upstream version 0.3.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-2" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-3" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="8ec904b1a0dbacb9d4a218c6974fe0f1ca0ca97b37d0c5667379f53001505ff3" name="sisu-javadoc" arch="noarch">
  <version epoch="1" ver="0.9.0~M3" rel="7.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-11" date="1706961600">- Add plexus-container-default alias</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.5-12" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.5-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-14" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-15" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.9.0~M3-1" date="1724155200">- Update to upstream version 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.9.0~M3-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="e8218f846fee928e30b461c3525a3d5430a0c94d12d329f8a4c10743016b1c0c" name="sisu-javadoc" arch="noarch">
  <version epoch="1" ver="0.9.0~M3" rel="7.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-11" date="1706961600">- Add plexus-container-default alias</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.5-12" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.5-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-14" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-15" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.9.0~M3-1" date="1724155200">- Update to upstream version 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.9.0~M3-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b4a336c5968e55cf09b161a79f7bed3a4fa58c9ca02aed260513e806007eb369" name="sisu-maven-plugin" arch="noarch">
  <version epoch="1" ver="0.9.0~M3" rel="7.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-11" date="1706961600">- Add plexus-container-default alias</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.5-12" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.5-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-14" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-15" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.9.0~M3-1" date="1724155200">- Update to upstream version 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.9.0~M3-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="74e7876c65f4f7c7ea0727f7a4fc5e8eb91cdd7ed69f2873b05ffacdbba14e13" name="sisu-maven-plugin" arch="noarch">
  <version epoch="1" ver="0.9.0~M3" rel="7.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-11" date="1706961600">- Add plexus-container-default alias</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.5-12" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:0.3.5-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.3.5-14" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:0.3.5-15" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.9.0~M3-1" date="1724155200">- Update to upstream version 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1:0.9.0~M3-3" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="01d725ddd6caab2e10a10bd040267a83172fce5b9160d298aab7208f28eb062d" name="sisu-mojos" arch="noarch">
  <version epoch="0" ver="0.3.4" rel="10.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.3.4-1" date="1573300800">- Update to version 0.3.4.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.3.4-2" date="1574424000">- Remove unnecessary dependency on parent POM.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-3" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0.3.4-4" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.4-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.4-8" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.4-9" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.4-10" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="679a8c343bdee4e206daabb269441641457811b080103ff220d7ff67f77d9c68" name="sisu-mojos" arch="noarch">
  <version epoch="0" ver="0.3.5" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.4-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-8" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.4-9" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-10" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0.3.4-11" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.5-1" date="1652097600">- Update to upstream version 0.3.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.5-2" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="2e4cf7a6e42359600529244bc8aaea754a750748e6b1223e50680bd773e4067e" name="sisu-mojos-javadoc" arch="noarch">
  <version epoch="0" ver="0.3.4" rel="10.el9"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.3.4-1" date="1573300800">- Update to version 0.3.4.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.3.4-2" date="1574424000">- Remove unnecessary dependency on parent POM.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-3" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0.3.4-4" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.4-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.4-8" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.4-9" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3.4-10" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8452115c9cee8d76d451d4d56bc8f84a650b7988ff415cc237bd7b9fb391819b" name="sisu-mojos-javadoc" arch="noarch">
  <version epoch="0" ver="0.3.5" rel="2.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-5" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.4-7" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-8" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.4-9" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.4-10" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0.3.4-11" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 0.3.5-1" date="1652097600">- Update to upstream version 0.3.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3.5-2" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="d354338908ece14f129c2468d3670e22ed838b7110b32954a07f1f6bfa95a496" name="slang-slsh" arch="aarch64">
  <version epoch="0" ver="2.3.2" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-7" date="1580385600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.2-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-10" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.3.2-11" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a629abc156e52979a5d83fd967fa782f3b92ebf3a9bffc34e34b410cff2bc570" name="slf4j" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-6" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-7" date="1599652800">- Disable unused log4j12 module.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7.30-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.30-10" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1.7.30-11" date="1637064000">- Enable slf4j-migrator and log4j-over-slf4j modules</changelog>
  <changelog author="Simon Legner &lt;Simon.Legner@gmail.com&gt; - 1.7.32-1" date="1637582400">- Update to upstream version 1.7.32</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="429b66b12c99b7584dcb7dedc59dac650ec613927805a8d9e17c12237cb17ad1" name="slf4j" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1140cad1d18884a533719cfb49b7fe7ea41c2a2bff9711535dfd712b017165ed" name="slf4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.30" rel="16.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-13" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-14" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-15" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-16" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="174fbb03d4fec1a1216142d790ae91ea03ef8b458f9064694db340413cdfa3c2" name="slf4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-6" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-7" date="1599652800">- Disable unused log4j12 module.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7.30-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.30-10" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1.7.30-11" date="1637064000">- Enable slf4j-migrator and log4j-over-slf4j modules</changelog>
  <changelog author="Simon Legner &lt;Simon.Legner@gmail.com&gt; - 1.7.32-1" date="1637582400">- Update to upstream version 1.7.32</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="ce4c91473412f2213480a943f065aaf24a84dae3344f4aa2a4002427d6984589" name="slf4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="edd8fc10f1b7147add82d55a4750380c4b3535ed97419018d6f92efa0a83e55e" name="slf4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="b225e88fd51caebf9c38446b6d1ba8ffeb5039cdd9f1264fc89e0ed4f5c7aed2" name="slf4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="a3d6e0e42a3c4f0babcc930969066ed246af32b90c14573474375b7627573689" name="slf4j-jcl" arch="noarch">
  <version epoch="0" ver="1.7.30" rel="16.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-13" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-14" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-15" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-16" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="5069144a78709c2501d6742fed59c835fea1e46cd46977b29e61a3a1071073f9" name="slf4j-jcl" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-6" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-7" date="1599652800">- Disable unused log4j12 module.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7.30-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.30-10" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1.7.30-11" date="1637064000">- Enable slf4j-migrator and log4j-over-slf4j modules</changelog>
  <changelog author="Simon Legner &lt;Simon.Legner@gmail.com&gt; - 1.7.32-1" date="1637582400">- Update to upstream version 1.7.32</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="3452af7aa4c77f3248608058c8014fdfe36d17320db7e05606ea0c17e5825320" name="slf4j-jcl" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="ca26271c89bf86b0983efb886fe95a964362273a4d9cb020c72f5f7913448533" name="slf4j-jcl" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="d7e82e3f1d8c157eae8e3332dc9890bec35a9584aabcfd17cf87989456388c4d" name="slf4j-jcl" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="d29155cf277608c01c1edfe4c5f5ba91f90552433184f13c7371254de694bdb7" name="slf4j-jdk14" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-6" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-7" date="1599652800">- Disable unused log4j12 module.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7.30-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.30-10" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1.7.30-11" date="1637064000">- Enable slf4j-migrator and log4j-over-slf4j modules</changelog>
  <changelog author="Simon Legner &lt;Simon.Legner@gmail.com&gt; - 1.7.32-1" date="1637582400">- Update to upstream version 1.7.32</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="8074ef4a294e053a2edfdbc9027a124a541f219103a861a7000b4e0a340f1758" name="slf4j-jdk14" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="959424d02340fdbe771b654ae57dd16661fbdea1c129692dc496c415996b78b2" name="slf4j-jdk14" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="96ad678e25cacbc9a7ed27764da92b8e0f079b462fee3120c7a61d3cd58f11d3" name="slf4j-jdk14" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="cf66fe0a64c3978c8906ad716b89b486a7c9339d60a5f9992a4174fac2bc56cb" name="slf4j-manual" arch="noarch">
  <version epoch="0" ver="1.7.30" rel="16.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-13" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-14" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-15" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-16" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="aa48ee0e08612bd76774dd9c24de220e5ad5fd2d3cb9a24740a69dbd8bf319cd" name="slf4j-manual" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-6" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-7" date="1599652800">- Disable unused log4j12 module.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7.30-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.30-10" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1.7.30-11" date="1637064000">- Enable slf4j-migrator and log4j-over-slf4j modules</changelog>
  <changelog author="Simon Legner &lt;Simon.Legner@gmail.com&gt; - 1.7.32-1" date="1637582400">- Update to upstream version 1.7.32</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="c94dda771694421f4f77bf38c9f519e06b98d1e468da468840451bcc03230852" name="slf4j-manual" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="44b0dc40827cfd4d7bb7db052857da93087a8707ad6b31aac9e19142ca6d7ea2" name="slf4j-manual" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="6d2e3b239e3cfd823b8443beea013f59d6f3caf9ef186371a535b5232133814b" name="slf4j-manual" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="129533fbb7b73ca31e125477741d019cfada369ab031750c19a904d0aa811ba0" name="slf4j-migrator" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-6" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-7" date="1599652800">- Disable unused log4j12 module.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7.30-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.30-10" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1.7.30-11" date="1637064000">- Enable slf4j-migrator and log4j-over-slf4j modules</changelog>
  <changelog author="Simon Legner &lt;Simon.Legner@gmail.com&gt; - 1.7.32-1" date="1637582400">- Update to upstream version 1.7.32</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="913ff0a485cae304c208d0875bd1d606cb7262a07e1c8d957e25aa1cff1a42f2" name="slf4j-migrator" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="94256456dc21d50bf2fac9a68e5ebe7db72a94cfc9dea8d8b0633d87de357eb2" name="slf4j-migrator" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="48a193fbc984674c58e8e86a1a6e4f4c242fae9a9d9b3aed9bbd287dc181b035" name="slf4j-migrator" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1f486f5550ea306e766b145910aa5f5a5ab3a8fb9f26cee04675eb289e6181ce" name="slf4j-sources" arch="noarch">
  <version epoch="0" ver="1.7.30" rel="16.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-13" date="1675080000">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-14" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-15" date="1732363200">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.7.30-16" date="1732363201">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="0aae8079f55fb23e305229cb5d8ef86cc3fb23f6a46f7b8f1074cc4f8f4fbd60" name="slf4j-sources" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-6" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7.30-7" date="1599652800">- Disable unused log4j12 module.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7.30-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.30-9" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.30-10" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Didik Supriadi &lt;didiksupriadi41@fedoraproject.org&gt; - 1.7.30-11" date="1637064000">- Enable slf4j-migrator and log4j-over-slf4j modules</changelog>
  <changelog author="Simon Legner &lt;Simon.Legner@gmail.com&gt; - 1.7.32-1" date="1637582400">- Update to upstream version 1.7.32</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="387710eb367290812801d49ac00275d3517eb4e0d8e347d0801b37bb6a6011cc" name="slf4j-sources" arch="noarch">
  <version epoch="0" ver="1.7.32" rel="5.module_el9.4.0+85+46348494"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-5" date="1707134400">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="8f855da19689479fbc27191a7b9e8308728c9c940de37995c4ebdd38730eb5ed" name="slf4j-sources" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="dc730e9abf1fc33b64bfc07f71e65f2241f0da1bf6741b231869753fa39ead55" name="slf4j-sources" arch="noarch">
  <version epoch="0" ver="1.7.36" rel="9.module_el9.6.0+148+fb6dc857"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-7" date="1692100800">- Build with default JDK 17</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-8" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.32-9" date="1695211200">- Rebuild to regenerate auto-Requires on java</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.32-10" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-11" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7.32-12" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.7.36-1" date="1721044800">- Update to upstream version 1.7.36</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7.36-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-6" date="1727179200">- Rebuild to regenerate auto-requires</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7.36-7" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="c22915505fbd04d7dd422f1245e5b293553de301bd182bd82ef411b86528a6cc" name="softhsm-devel" arch="aarch64">
  <version epoch="0" ver="2.6.1" rel="11.el9"/>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 2.6.1-8" date="1707393600">- Run p11test tests individually
- Resolves: rhbz#2261703</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 2.6.1-9" date="1707480000">- Prevent access to global C++ variables once they destroyed
- Patch from Neil Horman (OpenSSL)</changelog>
  <changelog author="Alexander Bokovoy &lt;abokovoy@redhat.com&gt; - 2.6.1-10" date="1712664000">- Revert SPDX license change as RHEL 9 does not use it</changelog>
  <changelog author="Rafael Jeffman &lt;rjeffman@redhat.com&gt; - 2.6.1-11" date="1753185600">- Use systemd-sysusers
  Resolves: RHEL-76028</changelog>
</package>
<package pkgid="b7ebed6cd5882b50194d6a225d8abec5c6c9ad6b4f203004166ac5d438e0d990" name="spax" arch="aarch64">
  <version epoch="0" ver="1.6" rel="6.el9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.6-1" date="1569240000">- new upstream release
- drop WITH_SELINUX knob and selinux patches, there's built-in support now
- drop several patches which were incorporated upstream, except for
  changewarnSegv patch (did not apply, and not needed nowadays)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f40a812799bd2b95ad968a338844fe44db0089c631e5fc24a3e1da846c05b008" name="speech-dispatcher-festival" arch="aarch64">
  <version epoch="0" ver="0.10.2" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-5" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.9.1-6" date="1582632000">- Fixed FTBFS</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.9.1-7" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.10.1-1" date="1597060800">- Update to 0.10.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.10.1-2" date="1599825600">- Fix crash with python 3.9 (#1878276)</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.10.2-1" date="1606305600">- Update to 0.10.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.2-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.2-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.2-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="20d54edf552c3db54b319efb99fec85adad4a59b4c67c338cc1ad12c6d6be17b" name="speech-dispatcher-flite" arch="aarch64">
  <version epoch="0" ver="0.10.2" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-5" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.9.1-6" date="1582632000">- Fixed FTBFS</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.9.1-7" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.10.1-1" date="1597060800">- Update to 0.10.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.10.1-2" date="1599825600">- Fix crash with python 3.9 (#1878276)</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.10.2-1" date="1606305600">- Update to 0.10.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.2-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.2-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.2-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a252c6f11b977a540a523226f74f34536ab90f7bacfbb67aba391736e1c1df78" name="speech-dispatcher-utils" arch="aarch64">
  <version epoch="0" ver="0.10.2" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-5" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 0.9.1-6" date="1582632000">- Fixed FTBFS</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 0.9.1-7" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.9.1-8" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.10.1-1" date="1597060800">- Update to 0.10.1</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.10.1-2" date="1599825600">- Fix crash with python 3.9 (#1878276)</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 0.10.2-1" date="1606305600">- Update to 0.10.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.10.2-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.2-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.10.2-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="27e354f1a40869425adba0e1483693638cff8dc931a5db2a8309e0ce48866b52" name="speech-tools" arch="aarch64">
  <version epoch="0" ver="2.5" rel="18.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-12" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Tyrychtr &lt;lukastyrychtr@gmail.com&gt; - 2.5-13" date="1580904000">Fix building with the latest GCC.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-14" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-15" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5-16" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5-17" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5-18" date="1643198400">- Link with -Wl,-z,now
  Resolves: rhbz#2044891</changelog>
</package>
<package pkgid="0adbbe3132574d35d0e320d3ec30c1a18b99ef1d4a1a3ebef6315a310b0be1bc" name="speech-tools-libs-devel" arch="aarch64">
  <version epoch="0" ver="2.5" rel="18.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-12" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Tyrychtr &lt;lukastyrychtr@gmail.com&gt; - 2.5-13" date="1580904000">Fix building with the latest GCC.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-14" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-15" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5-16" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5-17" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5-18" date="1643198400">- Link with -Wl,-z,now
  Resolves: rhbz#2044891</changelog>
</package>
<package pkgid="6b8aedd1ecd3a395284a633ab19bc0eec09b9aca7bd31f148a87cd9a4faf5353" name="speech-tools-libs-static" arch="aarch64">
  <version epoch="0" ver="2.5" rel="18.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-12" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Luk&#xE1;&#x161; Tyrychtr &lt;lukastyrychtr@gmail.com&gt; - 2.5-13" date="1580904000">Fix building with the latest GCC.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-14" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5-15" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5-16" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5-17" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Matthias Clasen &lt;mclasen@redhat.com&gt; - 2.5-18" date="1643198400">- Link with -Wl,-z,now
  Resolves: rhbz#2044891</changelog>
</package>
<package pkgid="c85df2fd254496425a07f9b61c4be347eefe730ad148798d7601a2649432189a" name="speex-tools" arch="aarch64">
  <version epoch="0" ver="1.2.0" rel="11.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-6" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.0-7" date="1597752000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.0-8" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.0-9" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.2.0-10" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Tomas Korbar &lt;tkorbar@redhat.com&gt; - 1.2.0-11" date="1648123200">- CVE-2020-23903 speex: divide by zero in read_samples() via crafted WAV file
- Resolves: CVE-2020-23903</changelog>
</package>
<package pkgid="9068ed80314058037073aa46a36220403acb8709e0ec58d2c33532e352293864" name="sqlite-analyzer" arch="aarch64">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="8512dd63c8e57b4bf9c89e1a44f6b4bd9d3789bb9d775510fb6e1a6908ebf141" name="sqlite-analyzer" arch="aarch64">
  <version epoch="0" ver="3.34.1" rel="11.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-10.1" date="1785326400">- Fixes CVE-2026-11824
- Resolves: RHEL-218281</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-11" date="1785326401">- Fixes CVE-2026-11822
- Resolves: RHEL-218273</changelog>
</package>
<package pkgid="c07112cdc4b753717899aeb773a991c006fd82e853d85476d1b81a6063e07ef9" name="sqlite-doc" arch="noarch">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="8ebc88a31cc6b1ac628980e519c3d174e33d82de22959785345c96380e1a8885" name="sqlite-doc" arch="noarch">
  <version epoch="0" ver="3.34.1" rel="11.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-10.1" date="1785326400">- Fixes CVE-2026-11824
- Resolves: RHEL-218281</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-11" date="1785326401">- Fixes CVE-2026-11822
- Resolves: RHEL-218273</changelog>
</package>
<package pkgid="c2310d96e804d127755fd82b8a5e2a88074827d7d39376373de67b194fac2c89" name="sqlite-tcl" arch="aarch64">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="c07553e180c622fd04fa8a7e072de21b86275beeef62712491d41fef78314af9" name="sqlite-tcl" arch="aarch64">
  <version epoch="0" ver="3.34.1" rel="11.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-10.1" date="1785326400">- Fixes CVE-2026-11824
- Resolves: RHEL-218281</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-11" date="1785326401">- Fixes CVE-2026-11822
- Resolves: RHEL-218273</changelog>
</package>
<package pkgid="37a935e6143934553be7352a1c7f5c292531215256cd641c580ffc57fe5c605c" name="sqlite-tools" arch="aarch64">
  <version epoch="0" ver="3.34.1" rel="10.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
</package>
<package pkgid="aef5a4abd256a0c141ddb4615b6d6376e6a59b5bdbc4a5bff8778d969510adc5" name="sqlite-tools" arch="aarch64">
  <version epoch="0" ver="3.34.1" rel="11.el9_8"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-8" date="1746619200">- Enabled sqlite-session feature
- Resolves: RHEL-89962</changelog>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 3.34.1-9" date="1752753600">- Fixes CVE-2025-6965</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 3.34.1-10" date="1773748800">- Enable sqlite3_deserialize and sqlite3_serialize interfaces
- Resolves: RHEL-155950</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-10.1" date="1785326400">- Fixes CVE-2026-11824
- Resolves: RHEL-218281</changelog>
  <changelog author="RHEL Packaging Agent &lt;redhat-ymir-agent@redhat.com&gt; - 3.34.1-11" date="1785326401">- Fixes CVE-2026-11822
- Resolves: RHEL-218273</changelog>
</package>
<package pkgid="860beb253fbcfab0b7c9d3dd0d63fa49acfd52a3fb4d8bf6c3955517d2ce7acf" name="star" arch="aarch64">
  <version epoch="0" ver="1.6" rel="6.el9"/>
  <changelog author="Pavel Raiskup &lt;praiskup@redhat.com&gt; - 1.6-1" date="1569240000">- new upstream release
- drop WITH_SELINUX knob and selinux patches, there's built-in support now
- drop several patches which were incorporated upstream, except for
  changewarnSegv patch (did not apply, and not needed nowadays)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="78cd2eb7ef27167573c29631bb9e5ee2dfb1039836865ca5b2a75b1f5a6a8070" name="stix-fonts-doc" arch="noarch">
  <version epoch="0" ver="2.0.2" rel="11.el9"/>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1582372800">- 2.0.2-2
✅ Rebuild with fonts-rpm-macros 2.0.2</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1583150400">- 2.0.2-3
✅ Lint, lint, lint and lint again</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1585828800">- 2.0.2-4
👻 Rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are valid</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1585828801">- 2.0.2-5
💥 Actually rebuild with fonts-rpm-macros 2.0.4 to make sure fontconfig files are
  valid</changelog>
  <changelog author="Nicolas Mailhot &lt;nim@fedoraproject.org&gt;" date="1587988800">- 2.0.2-6
🐞 Workaround Fedora problems created by rpm commit 93604e2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt;" date="1599825600">- 2.0.2-8
- Fix this spec file to build for F33+</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.2-9" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt;" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8a93fdab764dac9c59ef37b58bf05820b6cdd53f6d5756c4ee5c71d4ed284ff6" name="subversion-javahl" arch="noarch">
  <version epoch="0" ver="1.14.1" rel="7.el9"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 1.14.1-6" date="1752062400">- mod_dav_svn: inherit DavBasePath from httpd
  Resolves: RHEL-79948</changelog>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 1.14.1-7" date="1752148800">- mod_dav_svn: add conflicts to ensure compatible mod_dav
  Related: RHEL-79948</changelog>
</package>
<package pkgid="3b454734e899eda9a224b55910ceb984d220b22ce192def3f7111df33f87cfc0" name="subversion-ruby" arch="aarch64">
  <version epoch="0" ver="1.14.1" rel="7.el9"/>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 1.14.1-6" date="1752062400">- mod_dav_svn: inherit DavBasePath from httpd
  Resolves: RHEL-79948</changelog>
  <changelog author="Joe Orton  &lt;jorton@redhat.com&gt; - 1.14.1-7" date="1752148800">- mod_dav_svn: add conflicts to ensure compatible mod_dav
  Related: RHEL-79948</changelog>
</package>
<package pkgid="3b56a62b5b08f92434ded36060d22195fe2705b2bf72ed3b33ed547c587ec2be" name="sudo-devel" arch="aarch64">
  <version epoch="0" ver="1.9.17p2" rel="3.el9_8"/>
  <changelog author="Radovan Sroka &lt;rsroka@redhat.com&gt; - 1.9.5p2-13" date="1745582400">RHEL: 9.7.0 ERRATUM
- sudo missing spacing and separator in log when using "--preserve-env=list"
Resolves: RHEL-71916
- CVE-2025-32462 sudo: LPE via host option
Resolves: RHEL-100020</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.9.17p2-2" date="1763380800">- Request to backport support for regex in sudo [rhel-9]
Resolves: RHEL-1376
- Rebase of sudo to 1.9.17p2 [rhel-9]
Resolves: RHEL-128623
- sudo passes SHELL environment variable twice to the shell being executed [rhel-9]
Resolves: RHEL-127359</changelog>
  <changelog author="Alejandro L&#xF3;pez &lt;allopez@redhat.com&gt; - 1.9.17p2-3" date="1775736000">- CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls
Resolves: RHEL-166069</changelog>
</package>
<package pkgid="08d1d551cf68308a971d683a750235dc0ee8b174b5bbf9027e2063b86ef5f3ea" name="suitesparse-doc" arch="noarch">
  <version epoch="0" ver="5.4.0" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 5.4.0-5" date="1597320000">- https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 5.4.0-8" date="1625832000">- drop metis
Resolves: #1977815</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 5.4.0-10" date="1645444800">- Disable lazy binding (#2044892)
- Remove RPATH (#2056604)</changelog>
</package>
<package pkgid="f67dfabbd94f15fbb0e1c1555b5d73902be81cbd63d6a8886f6fe57e8a3fdd75" name="suitesparse-static" arch="aarch64">
  <version epoch="0" ver="5.4.0" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 5.4.0-5" date="1597320000">- https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 5.4.0-8" date="1625832000">- drop metis
Resolves: #1977815</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 5.4.0-10" date="1645444800">- Disable lazy binding (#2044892)
- Remove RPATH (#2056604)</changelog>
</package>
<package pkgid="a82f78a541c382d94892d01972fefcda074cedabd023cefe35e86f6cd3dc2971" name="suitesparse64" arch="aarch64">
  <version epoch="0" ver="5.4.0" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 5.4.0-5" date="1597320000">- https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 5.4.0-8" date="1625832000">- drop metis
Resolves: #1977815</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 5.4.0-10" date="1645444800">- Disable lazy binding (#2044892)
- Remove RPATH (#2056604)</changelog>
</package>
<package pkgid="b3ef4963f262ae949ccc2e8f82dbfa4dfaa340b376ad8c323522c1015ed01061" name="suitesparse64-devel" arch="aarch64">
  <version epoch="0" ver="5.4.0" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 5.4.0-5" date="1597320000">- https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 5.4.0-8" date="1625832000">- drop metis
Resolves: #1977815</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 5.4.0-10" date="1645444800">- Disable lazy binding (#2044892)
- Remove RPATH (#2056604)</changelog>
</package>
<package pkgid="1c24230c15b50148a88cfc90e1b7719aa740d551f89e34d267a850ab51a8ef9a" name="suitesparse64-static" arch="aarch64">
  <version epoch="0" ver="5.4.0" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 5.4.0-5" date="1597320000">- https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 5.4.0-8" date="1625832000">- drop metis
Resolves: #1977815</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 5.4.0-10" date="1645444800">- Disable lazy binding (#2044892)
- Remove RPATH (#2056604)</changelog>
</package>
<package pkgid="faf6fe3cf2e212566cdd1004e5eeb1a59e4721e9a547193bd01475009131926c" name="suitesparse64_" arch="aarch64">
  <version epoch="0" ver="5.4.0" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 5.4.0-5" date="1597320000">- https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 5.4.0-8" date="1625832000">- drop metis
Resolves: #1977815</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 5.4.0-10" date="1645444800">- Disable lazy binding (#2044892)
- Remove RPATH (#2056604)</changelog>
</package>
<package pkgid="8506e1ec82a0cb74d1080bf32c2a5b3e73e3ab951a657f803da7723600512812" name="suitesparse64_-devel" arch="aarch64">
  <version epoch="0" ver="5.4.0" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 5.4.0-5" date="1597320000">- https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 5.4.0-8" date="1625832000">- drop metis
Resolves: #1977815</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 5.4.0-10" date="1645444800">- Disable lazy binding (#2044892)
- Remove RPATH (#2056604)</changelog>
</package>
<package pkgid="3cf0dd5b88d944414b5ff7570597413974c955f201af42a42512cf0331d3d1e3" name="suitesparse64_-static" arch="aarch64">
  <version epoch="0" ver="5.4.0" rel="10.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="I&#xF1;aki &#xDA;car &lt;iucar@fedoraproject.org&gt; - 5.4.0-5" date="1597320000">- https://fedoraproject.org/wiki/Changes/FlexiBLAS_as_BLAS/LAPACK_manager</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.0-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Lukas Nykryn &lt;lnykryn@redhat.com&gt; - 5.4.0-8" date="1625832000">- drop metis
Resolves: #1977815</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.4.0-9" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Sekletar &lt;msekleta@redhat.com&gt; - 5.4.0-10" date="1645444800">- Disable lazy binding (#2044892)
- Remove RPATH (#2056604)</changelog>
</package>
<package pkgid="6f93d5af7d8cf38e88f1814be18ca35bace76051e6758ba548a147acf0901601" name="switcheroo-control-docs" arch="noarch">
  <version epoch="0" ver="2.4" rel="4.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 2.0-1" date="1572955200">+ switcheroo-control-2.0-1
- Update to 2.0</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 2.0-2" date="1574337600">+ switcheroo-control-2.0-2
- Fix post scripts not reloading service file</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 2.1-1" date="1577966400">+ switcheroo-control-2.1-1
- Update to 2.1
- Fix crasher on startup (#1786846)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.1-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 2.2-1" date="1587988800">+ switcheroo-control-2.2-1
- Update to 2.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 2.4-1" date="1609761600">+ switcheroo-control-2.4-1
- Update to 2.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.4-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.4-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7bcc73591f7615974065f2a9bd636b71d577356d94a6e349b0a7321214fca501" name="swtpm-devel" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="2.el9_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.8.0-1" date="1669118400">- Update to v0.8.0 release
  Resolves: rhbz#2092944</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.8.0-2" date="1720440000">- Fix SHA-1 algorithm availability
  Resolves: RHEL-46788</changelog>
</package>
<package pkgid="98f708ba62929351854d6f822a970249f3f829c070c5e1e4fc2f09990a825929" name="swtpm-tools-pkcs11" arch="aarch64">
  <version epoch="0" ver="0.8.0" rel="2.el9_4"/>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.8.0-1" date="1669118400">- Update to v0.8.0 release
  Resolves: rhbz#2092944</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 0.8.0-2" date="1720440000">- Fix SHA-1 algorithm availability
  Resolves: RHEL-46788</changelog>
</package>
<package pkgid="e561f814a5645bb8be128147eb5c12467d42d342a51490134c10a6616e6086d1" name="syslinux-extlinux-nonlinux" arch="noarch">
  <version epoch="0" ver="6.04" rel="0.23.el9"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 6.04-0.22" date="1749816000">- isohybrid: Make GPT GUIDs reproducible with --uefi and --id
- Resolves: #RHEL-96214</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 6.04-0.23" date="1762344000">- Bump release number
- Resolves: #RHEL-96214</changelog>
</package>
<package pkgid="f50a0bfe2f53c4ce73c25767e5ac857357a70006ba064d9ffcf440de964bda65" name="syslinux-nonlinux" arch="noarch">
  <version epoch="0" ver="6.04" rel="0.23.el9"/>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 6.04-0.22" date="1749816000">- isohybrid: Make GPT GUIDs reproducible with --uefi and --id
- Resolves: #RHEL-96214</changelog>
  <changelog author="Leo Sandoval &lt;lsandova@redhat.com&gt; - 6.04-0.23" date="1762344000">- Bump release number
- Resolves: #RHEL-96214</changelog>
</package>
<package pkgid="e661ee807814ffbdacbe029e0a5e901740fcd5a5a27943b28b83715aa6ead840" name="sysprof" arch="aarch64">
  <version epoch="0" ver="3.40.1" rel="3.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.90-1" date="1613649600">- Update to 3.39.90</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.90-2" date="1613995200">- Specify pic for static libsysprof-capture</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.92-1" date="1614168000">- Update to 3.39.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.92-2" date="1614168001">- Split sysprof-capture library and header files out to sysprof-capture-devel
- Update minimum required glib2 version</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.94-1" date="1614254400">- Update to 3.39.94</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.94-2" date="1615896000">- Add explicit conflicts to help with upgrades</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.0-1" date="1616414400">- Update to 3.40.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.1-1" date="1616500800">- Update to 3.40.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c576bb62b6008ac51d7d4fdd1c85001329311a71aa65b543d93de45db56c8568" name="sysprof-cli" arch="aarch64">
  <version epoch="0" ver="3.40.1" rel="3.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.90-1" date="1613649600">- Update to 3.39.90</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.90-2" date="1613995200">- Specify pic for static libsysprof-capture</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.92-1" date="1614168000">- Update to 3.39.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.92-2" date="1614168001">- Split sysprof-capture library and header files out to sysprof-capture-devel
- Update minimum required glib2 version</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.94-1" date="1614254400">- Update to 3.39.94</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.94-2" date="1615896000">- Add explicit conflicts to help with upgrades</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.0-1" date="1616414400">- Update to 3.40.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.1-1" date="1616500800">- Update to 3.40.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d2f2e3f70788d7fbd24ea8bfe96323cdef6466bda7aa1aeb5d12fd1608b2f9dd" name="sysprof-devel" arch="aarch64">
  <version epoch="0" ver="3.40.1" rel="3.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.90-1" date="1613649600">- Update to 3.39.90</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.90-2" date="1613995200">- Specify pic for static libsysprof-capture</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.92-1" date="1614168000">- Update to 3.39.92</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.92-2" date="1614168001">- Split sysprof-capture library and header files out to sysprof-capture-devel
- Update minimum required glib2 version</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.94-1" date="1614254400">- Update to 3.39.94</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.39.94-2" date="1615896000">- Add explicit conflicts to help with upgrades</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.0-1" date="1616414400">- Update to 3.40.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.40.1-1" date="1616500800">- Update to 3.40.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.40.1-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="bb64dae0e23e62db60871f2ee8e05552f4df02eeb3533d48dddaf2866f53c086" name="sysroot-aarch64-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="63ef2eb72e5813b6dff9145e2e0eb0e5d1dc9a7956254abebb516397b6175b40" name="sysroot-aarch64-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="92fb332b840c4162ba16e26d3e00fd44ca9edd8c8acb52862263dbea506576ef" name="sysroot-aarch64-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="6fcfd93b65231b1db3da2edb3efb0affa9f7da7b00dab269cf718a629000b34d" name="sysroot-aarch64-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="3aae42f1fe0bb6a766ca9b0980b4587f8dc6ceea33dc797e1027235921a37b7e" name="sysroot-aarch64-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="993e2a79f700e0e8a19ea27ac56d7b5a6dc028fbfd7fecf70ef05d7d88bbf1a4" name="sysroot-i386-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="e03d78086cfde29cfdba4079a792ace8eaaf19d359460f225b46d89136ca5e5e" name="sysroot-i386-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="e6bc9f22976ef5aa560ca15082d340267f691728b6015095908f247074f4d9d9" name="sysroot-i386-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="461df4c4d3c7ce00f2be13a52ce74c522d2ea4b99d8e766afe1d50299892069b" name="sysroot-i386-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="8e7930e018743c5d5ad3280c5c073c7cb82eb6a604567524d2880582bb6e120c" name="sysroot-i386-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="d951de941ea0c1477fcebcebf08d5ad04332fd98514f63e0b83e959417d8efea" name="sysroot-ppc64le-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="7ec37db3a6e3b6aab8e9c7a6968eaf61f6a7c6311fc77eaa46faf65bcd9e95b8" name="sysroot-ppc64le-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="4344cc14e0c936407fbb8ae66805ed3b35b6663a1fba15d8b70653d28b52a604" name="sysroot-ppc64le-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="46f1e10727228428085efdfdefa1b9751b43dfd2c78e29127b6765cf18deb572" name="sysroot-ppc64le-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="bb8c2f72ecd1ac79ecc8f09738c0e31871807494df50017c0691e9d057e3add4" name="sysroot-ppc64le-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="aec928f9703ca5feb49f1ccacd835ea201dbc275a77fae1d5c62c3f615a4c15b" name="sysroot-s390x-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="4839f596fe46d5ef6031923beddfe8f2d329708d6bd39fc57140ab43d012dca6" name="sysroot-s390x-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="36ecc1d22041c27465a506855ce7787d0c2bac396f2ffced3a084f76ef2b05e5" name="sysroot-s390x-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="6b704e1ff1815054cd384c26148cd9ddb210bc28a534ea7defc80fb2ec084728" name="sysroot-s390x-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="7f9a6f268a0dd78bc9789cbb9a2e15da36d3d50c889c1928fb9d498d97370078" name="sysroot-s390x-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="60b751e94e60e7312ed28e5e61928484befbd7e370f62404fe2d62743cfb043d" name="sysroot-x86_64-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="266.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-257" date="1770984000">- Update locales for Croatia to use EUR as currency symbol (RHEL-140105)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-258" date="1771243200">- Optimize trylock for high cache contention workloads. (RHEL-141072)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-259" date="1771848000">- Restore iconv tool verbosity for unrecognized encoding names (RHEL-1018)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-260" date="1771934400">- Fix race condition in io/tst-stat symlink test (RHEL-142209)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
</package>
<package pkgid="e36d3d949f61a678eb2d8c20c07d2ad2b91a4eaab45ef26c61ae687ff84974a8" name="sysroot-x86_64-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="270.el9_8"/>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-261" date="1772107200">- Remove default value for LD_PROFILE_OUTPUT (RHEL-142196)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-262" date="1773748800">- dlfcn: Add dlinfo request type RTLD_DI_ORIGIN_PATH (RHEL-54450)</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
</package>
<package pkgid="26e7b4388d9df564431ae6782d97c6c065af2abaa71bb8c591c7169bb08964f3" name="sysroot-x86_64-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="272.el9_8"/>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 2.34-263" date="1774267200">- Avoid duplicate DNS query if search list contains '.' (RHEL-153056)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-264" date="1774440000">- Add LD_DEBUG=tls support for tracking TLS and TCB events (RHEL-49785)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440001">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
</package>
<package pkgid="9444c49dce12c86b08a767503ad6871271ae1a522192216d1253b593b66b6bf2" name="sysroot-x86_64-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="274.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-265" date="1774440000">- Fix null pointer dereference and assertion failures in __nss_database_get
  (bug 28940) (RHEL-150269)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
</package>
<package pkgid="b29e0b36994ee861b703c0fb7b08a87179fb6fba469301477e224f0f47bebad1" name="sysroot-x86_64-el9-glibc" arch="noarch">
  <version epoch="0" ver="2.34" rel="275.el9_8"/>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-266" date="1774526400">- Fix namespace violation in fortify wrappers (bug 32052) (RHEL-52966)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-267" date="1778068800">- CVE-2026-4046: Fix assertion failure in IBM1390 and IBM1399 iconv modules
  (RHEL-162901)</changelog>
  <changelog author="Arjun Shankar &lt;arjun@redhat.com&gt; - 2.34-268" date="1778328000">- resolv: Correctly count records and check hostname validity (RHEL-168851,
  RHEL-168852)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-269" date="1778414400">- Fix __nss_get_default_domain logic to restore netgroup user enumeration
  (RHEL-168096)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-270" date="1778414401">- Fix incorrect setting of CXX variable in spec file (RHEL-148252)</changelog>
  <changelog author="Fr&#xE9;d&#xE9;ric B&#xE9;rat &lt;fberat@redhat.com&gt; - 2.34-271" date="1781006400">- Fix gconv module reference counter overflow in swscanf and swprintf
  families (RHEL-145156)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-272" date="1782129600">- CVE-2026-5450: Fix buffer overflow in scanf (RHEL-172710)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-273" date="1782475200">- CVE-2026-5928: Fix ungetwc operating on byte stream (RHEL-180340)</changelog>
  <changelog author="DJ Delorie &lt;dj@redhat.com&gt; - 2.34-274" date="1783425600">- CVE-2026-5435 Out-of-bounds write via TSIG record processing (RHEL-180336,
  RHEL-185614)</changelog>
  <changelog author="Patsy Griffin &lt;patsy@redhat.com&gt; - 2.34-275" date="1784721600">- iconv: Suppress intermediate errors with //TRANSLIT (RHEL-178279)</changelog>
</package>
<package pkgid="9cadb3bad8fdb965522b44ea651c7f69fb4c383faf84342b58c9e35ed735df4d" name="systemd-standalone-sysusers" arch="aarch64">
  <version epoch="0" ver="252" rel="67.el9_8.2.alma.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 252-67.2.alma.1" date="1779278400">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="67f6e35011cb02e41f1cbdf0850f31ccf142b5b0f813d290ebf63f48e6ad834d" name="systemd-standalone-sysusers" arch="aarch64">
  <version epoch="0" ver="252" rel="67.el9_8.4.alma.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 252-67.4.alma.1" date="1782388800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="2f6c16977fbcf7b29442730abb20547820b658136a22b49b6de2dddae2973341" name="systemd-standalone-tmpfiles" arch="aarch64">
  <version epoch="0" ver="252" rel="67.el9_8.2.alma.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-61" date="1763726400">- timer: rebase the next elapse timestamp only if timer didn't already run (RHEL-118215)
- strv: introduce string_strv_hashmap_remove() (RHEL-14112)
- unit-file: introduce unit_file_remove_from_name_map() (RHEL-14112)
- core/unit: remove path to transient unit file from unit name maps on stop (RHEL-14112)
- TEST-07-PID1: add reprudcer for issue #35190 (RHEL-14112)
- coredump: handle ENOBUFS and EMSGSIZE the same way (RHEL-103801)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-62" date="1763985600">- ukify: rstrip and escape binary null characters from 'inspect' output (#38607) (RHEL-109558)
- timer: rebase last_trigger timestamp if needed (RHEL-118215)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 252-67.2.alma.1" date="1779278400">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="4fe75f7f8bb0b9010b80862803f261b0a13256c1fa3af931f20fb282de2f599c" name="systemd-standalone-tmpfiles" arch="aarch64">
  <version epoch="0" ver="252" rel="67.el9_8.4.alma.1"/>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-63" date="1764244800">- cryptsetup-generator: refactor add_crypttab_devices() (RHEL-127859)
- cryptsetup-generator: continue parsing after error (RHEL-127859)
- cryptsetup-generator: parse all cmdline devices too (RHEL-127859)
- cryptsetup-generator: always process cmdline devices (RHEL-127859)
- logind: add "background-light" session class (RHEL-109833)
- pam_systemd: honor session class provided via PAM environment (RHEL-109833)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-64" date="1765540800">- core: fix array size in unit_log_resources() (RHEL-131338)
- pid1: add env var to override default mount rate limit burst (RHEL-129153)
- pid1: add env var to override default mount rate limit interval (RHEL-129153)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-65" date="1771416000">- update specfile and sources after renaming rhel-net-naming-sysattrs to net-naming-sysattrs (RHEL-150622)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-66" date="1771848000">- core/service: fix error cause in the log (RHEL-138414)
- fstab-generator: drop assertions for mount opts (RHEL-92752)
- fstab-generator: fix options in systemd.mount-extra= arg (RHEL-92752)
- core: reorder systemd arguments on reexec (RHEL-111135)
- basic: add RuntimeScope enum (RHEL-137252)
- runtime-scope: add helper that turns RuntimeScope enum into --system/--user string (RHEL-137252)
- sd-path: add support for XDG_STATE_HOME (RHEL-137252)
- sd-path: bring spacing in sd-path.h and systemd-path tool in sync (RHEL-137252)
- path tool: add some basic ansi highlighing (RHEL-137252)
- execude: include RuntimeScope field in ExecParameters (RHEL-137252)
- execute: remove redundant assignment (RHEL-137252)
- execute: when recursively chowning StateDirectory= when spawning services, follow initial symlink (RHEL-137252)
- execute: add support for XDG_STATE_HOME for placing service state data in --user mode (RHEL-137252)
- execute: associate logs from setup_exec_directory() with the unit name (RHEL-137252)
- execute: shorten some code by using RET_NERRNO() (RHEL-137252)
- execute: shorten code by making use of laccess() return code properly (RHEL-137252)
- execute: don't bother with chowning StateDirectory= and friends in user mode (RHEL-137252)
- test: add test for new XDG_STATE_HOME handling (RHEL-137252)
- man: mention the newly-added XDG_STATE_HOME (RHEL-137252)
- man: rebreak lines in file-hierarchy(7) a bit (RHEL-137252)
- man: properly close XML tags (RHEL-137252)
- tmpfiles: teach tmpfiles the new XDG_STATE_HOME variable too (RHEL-137252)
- test: use XDG_STATE_HOME for %S and %L (RHEL-137252)
- man: fully adopt ~/.local/state/ (RHEL-137252)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67" date="1771848001">- core: only activate transaction that contain useful jobs (RHEL-143727)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.1" date="1774353600">- manager: fix scope for environment generators (RHEL-154262)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.2" date="1775131200">- core: validate input cgroup path more prudently (RHEL-152082)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.3" date="1776340800">- nspawn: apply BindUser/Ephemeral from settings file only if trusted (RHEL-163870)
- nspawn: normalize pivot_root paths (RHEL-163870)
- udev: check for invalid chars in various fields received from the kernel (RHEL-163876)
- udev: fix review mixup (RHEL-163876)
- udev/scsi-id: check for invalid chars in various fields received from the kernel (RHEL-163876)</changelog>
  <changelog author="systemd maintenance team &lt;systemd-maint@redhat.com&gt; - 252-67.4" date="1778587200">- fstab-generator: support swap on network block devices (RHEL-166186)</changelog>
  <changelog author="Andrew Lukoshko &lt;alukoshko@almalinux.org&gt; - 252-67.4.alma.1" date="1782388800">- Debrand for AlmaLinux</changelog>
</package>
<package pkgid="a8f96aea8441462d3a1588dbfecda85c86e6ab9faee3acbe194dc68a96c0b1a0" name="systemtap-jupyter" arch="aarch64">
  <version epoch="0" ver="5.4" rel="4.el9"/>
  <changelog author="Martin Cermak &lt;mcermak@redhat.com&gt; - 5.1-4" date="1725883200">- RHEL-50107.patch:  Make systemtap compatible with kernel
  commit 68cbd415dd4b .  Related: RHEL-56962 .</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 5.2-1" date="1731326400">- Upstream release, see wiki page below for detailed notes.
- https://sourceware.org/systemtap/wiki/SystemTapReleases</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 5.2-2" date="1731672000">- RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 5.3-1" date="1746187200">- Upstream release, see wiki page below for detailed notes.
  https://sourceware.org/systemtap/wiki/SystemTapReleases</changelog>
  <changelog author="Martin Cermak &lt;mcermak@redhat.com&gt; - 5.3-2" date="1747051200">- RHEL-RHEL-89809: stap-server log owned by root</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 5.3-3" date="1749124800">- RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 5.4-1" date="1761912000">- Upstream release, see wiki page below for detailed notes.
  https://sourceware.org/systemtap/wiki/SystemTapReleases</changelog>
  <changelog author="Martin Cermak &lt;mcermak@redhat.com&gt; - 5.4-2" date="1763035200">- Backport upstream patch 53c48b550 imply kernel&lt;vmlinux.h&gt;
  check by file name.</changelog>
  <changelog author="Martin Cermak &lt;mcermak@redhat.com&gt; - 5.4-3" date="1764331200">- Fix RHEL-130244</changelog>
  <changelog author="Martin Cermak &lt;mcermak@redhat.com&gt; - 5.4-4" date="1764676800">- Fix RHEL-132676</changelog>
</package>
<package pkgid="5063085c6ec7e29bd39244d4243416beae705b3d80fb369c820173688bef5914" name="systemtap-testsuite" arch="aarch64">
  <version epoch="0" ver="5.4" rel="4.el9"/>
  <changelog author="Martin Cermak &lt;mcermak@redhat.com&gt; - 5.1-4" date="1725883200">- RHEL-50107.patch:  Make systemtap compatible with kernel
  commit 68cbd415dd4b .  Related: RHEL-56962 .</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 5.2-1" date="1731326400">- Upstream release, see wiki page below for detailed notes.
- https://sourceware.org/systemtap/wiki/SystemTapReleases</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 5.2-2" date="1731672000">- RHEL-67586: supply /usr/bin/dtrace in sdt-devel subrpm too</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 5.3-1" date="1746187200">- Upstream release, see wiki page below for detailed notes.
  https://sourceware.org/systemtap/wiki/SystemTapReleases</changelog>
  <changelog author="Martin Cermak &lt;mcermak@redhat.com&gt; - 5.3-2" date="1747051200">- RHEL-RHEL-89809: stap-server log owned by root</changelog>
  <changelog author="William Cohen &lt;wcohen@redhat.com&gt; - 5.3-3" date="1749124800">- RHEL-90805: Update dev.stp tapset to handle RHEL-9.7 kernels.</changelog>
  <changelog author="Frank Ch. Eigler &lt;fche@redhat.com&gt; - 5.4-1" date="1761912000">- Upstream release, see wiki page below for detailed notes.
  https://sourceware.org/systemtap/wiki/SystemTapReleases</changelog>
  <changelog author="Martin Cermak &lt;mcermak@redhat.com&gt; - 5.4-2" date="1763035200">- Backport upstream patch 53c48b550 imply kernel&lt;vmlinux.h&gt;
  check by file name.</changelog>
  <changelog author="Martin Cermak &lt;mcermak@redhat.com&gt; - 5.4-3" date="1764331200">- Fix RHEL-130244</changelog>
  <changelog author="Martin Cermak &lt;mcermak@redhat.com&gt; - 5.4-4" date="1764676800">- Fix RHEL-132676</changelog>
</package>
<package pkgid="278a38a3197fb1486b56242ad28279c8afb06b0bd31829be68e30438c7bb800e" name="tcl-brlapi" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="4.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.1-8" date="1594900800">- Dropped explicit brlapi dependency (brltty) and relaxed brltty
  dependency (brlapi)
  Related: rhbz#1765611</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1-9" date="1595851200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.1-10" date="1598011200">- OCaml 4.11.0 rebuild</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 6.1-11" date="1598961600">- OCaml 4.11.1 rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.1-12" date="1603195200">- Fixed brlapi.key to pass the RPM verification</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.1-13" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.3-1" date="1612180800">- New version
  Resolves: rhbz#1910328</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.3-2" date="1618488000">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 6.3-3" date="1624363200">- Fixed brlapi multilib
  Resolves: rhbz#1915335</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 6.3-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="f9fec2a8a74b17f2343632d71f1bfbe12b65ebf6de7978a3cd0a8fe133d005e7" name="teamd-devel" arch="aarch64">
  <version epoch="0" ver="1.31" rel="16.el9_1"/>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-7" date="1623931200">- gating: fix the wrong link of openvswitch for RHEL-9 [1970175]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-8" date="1627473600">- Build util team2bond in teamd rpm [1986788]
- Add some cautions to util team2bond [1986788]
- Add team2bond man doc [1986788]</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.31-9" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-10" date="1629115200">- Remove an extra line in spec file</changelog>
  <changelog author="Xin Long &lt;lxin@redhat.com&gt; - 1.31-11" date="1636977600">- Revert "teamd: Disregard current state when considering port enablement" [1894546]</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-12" date="1646654400">- utils/team2bond: do not add miimon if already exist (rhbz#2060445)</changelog>
  <changelog author="Hangbin Liu &lt;haliu@redhat.com&gt; - 1.31-13" date="1652702400">- utils/team2bond: do not add updelay/downdelay if already exist (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-14" date="1655121600">- Rebuilt with a new version to pass the fixed gating test (rhbz#2060445)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-15" date="1670241600">- teamd: do no remove the ports on shutdown with -N (rhbz#2148854)</changelog>
  <changelog author="Long Xin &lt;lxin@redhat.com&gt; - 1.31-16" date="1670328000">- fix the Requires package name for teamd-devel
- teamd: stop iterating callbacks when a loop restart is requested (rhbz#2148852)</changelog>
</package>
<package pkgid="e1b8e05f593cdde57fd8fb5390eb6c0cc2fb0508b4d11a7f7a1802bb455fe2cd" name="teckit-devel" arch="aarch64">
  <version epoch="0" ver="2.5.9" rel="8.el9"/>
  <changelog author="Petr Pisar &lt;ppisar@redhat.com&gt; - 2.5.9-2" date="1565611200">- Modernize spec file
- License corrected to
  ((LGPLv2+ or CPL) and (LGPLv2+ or GPLv2+ or MPLv2.0 or MPLv1.1))</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.9-3" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.9-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.9-5" date="1596283200">- Second attempt - Rebuilt for
  https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.9-6" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.9-7" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.5.9-8" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a98a3bd3263bd18df96094c2cc1b0356e726ab18f7e5d1a8f30362babf977d8e" name="tesseract-script-arabic" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="593cf3ebbad80fef1fc44c963b9526f79d879318e95643881358cd60855886ba" name="tesseract-script-armenian" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="b57f8da2d3d86e2528e023a8e4209b8f569c8e566eba9638bacd1c1b4603d633" name="tesseract-script-bengali" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="68da8f9f2d07dc9abab66b5db6eb87399d1a82c485d3740f40f24bbfd97fc1f3" name="tesseract-script-canadian_aboriginal" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="25b6a8bdcdc5b9746a11ec2489248cb0f464465ed71b0c37ea1e303bbff7ec15" name="tesseract-script-cherokee" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="14855e06182f8f66a10242a7a56a0cd3e631d14d814d2e87f32cb85eb716238a" name="tesseract-script-cyrillic" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="d2ad2dd868609d86dcd002d82d901bc7cb2d21d492a78d4ffb07dfa24c95b227" name="tesseract-script-devanagari" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="c359f1b968c9f2cc205162f32bdc4a8085ec25e201002d03300be3e9969684d5" name="tesseract-script-ethiopic" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="02639b4aa8b27dac192bf93fa9a5e66307a6bbb931028e4cfe74d95570cb4555" name="tesseract-script-fraktur" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="cab08222e8bc490c490777e9ed3ec0567057372ef9c3341a1e8c341b4aee7142" name="tesseract-script-georgian" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="3cf5fffedc9a191b6c6de264cb27c55dd25fe4b6373024e1b60c73daeca93287" name="tesseract-script-greek" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="6cb9db7eecf55ca394aa66025df405263945afb805d009a015390a52ffae81f4" name="tesseract-script-gujarati" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="20042d286fb2498ba7eaca10d2afa498e777178f02804f73092e53351f3ee1ba" name="tesseract-script-gurmukhi" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="ca98fbd5978e6d2021c52ce6d6a38e9567693dbe75c2cce74dcf5cab405818de" name="tesseract-script-hangul" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="873d9079aac8f2b7c29c6c8cbf0d09b8b2638d28205d64eb0d748cc536a4d2d8" name="tesseract-script-hangul_vert" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="ddf0666b6b637a9c0415bb26a7c9a3b1ca772f578424f97a56405430301fc17d" name="tesseract-script-hans" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="1c2f9f46f35e2ffdf39c57ae42538110df5a76c65c9e334fd82de7f7c6f54eb2" name="tesseract-script-hans_vert" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="862708e5994bb41d3a91a147a93c525b8bba9a12686e82df7c1addee75ee9928" name="tesseract-script-hant" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="e0102a6f419e5dd08ed3868c74ea1b2f6ea43b8ae2e1a12d0c0ed73d3a704429" name="tesseract-script-hant_vert" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="0fb090d5c0a61085f0465e3811fbd12826fb6c8f127e9d56b123d8d3f4a7b281" name="tesseract-script-hebrew" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="3ead5569331cee6a2f8205e861a96777508e90255736be7a6da2c143450fcab7" name="tesseract-script-japanese" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="b60218df5fbaf7653e1b67e44d5af75d79d32d0540aeb1966be1df8a07a89fe8" name="tesseract-script-japanese_vert" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="32743d4b95e2eb96eac90246d090a7428365e203a2c344e2b18b46b47c562cc1" name="tesseract-script-kannada" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="2c91e13aac310561f441565eaf87415bc3e0ebf384b1bd428514c99624ff5a2a" name="tesseract-script-khmer" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="acef773ab7be54ee00e4b1217bf4915f693462d26979cb2bae922a56c349ead7" name="tesseract-script-lao" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="fedb64ca62dd8bd4189d1da7b4d9d4001738e8adc728d398554ee29a6230defe" name="tesseract-script-latin" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="8d7159b98a694810ccf9a5c747dec18ce15ba6520d0fa56a40777dfe8180ba3f" name="tesseract-script-malayalam" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="d377b1d6d6673bdbd0034c77a98c127e8b5b474a4a681648db95ef683bf1f97d" name="tesseract-script-myanmar" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="f63dddb858efd36dc83d853259d4dcf2c5aa1f6b4d049c8b28696d24615394c0" name="tesseract-script-oriya" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="66255a25cf324b1fc86f07bb7a4cac940a7aa6c628bdb6aff930191e8723dd87" name="tesseract-script-sinhala" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="9bf0d456a09adce9e3205c2f4618bb3a0f16ff88d973abb55c924dbba0cc4187" name="tesseract-script-syriac" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="6cf2baea8cd937f70d2b3bf942d7447a123b387133df209bc87adf254d43c92a" name="tesseract-script-tamil" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="1588040b24af2aa589e327a6377af82b6eedbc9dc8285e49d70d8432454c73bc" name="tesseract-script-telugu" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="b7fee4ea7858b11a1b2de39d0bae1bc4fbaaf36d4ba8c293877e74f604693c71" name="tesseract-script-thaana" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="3d9a10c86d9a5cdcb52e54c82b60e2526d085ec6468f84da10f520c21e0dc409" name="tesseract-script-thai" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="52b537f1c32637c48e2a0886a81d1fbf14be3b05ea65d264025aedbde75dbce3" name="tesseract-script-tibetan" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="9f8570a8a773825c6ff911bce11e9d9e5512647cab5e903b0eb8db974705df75" name="tesseract-script-vietnamese" arch="noarch">
  <version epoch="0" ver="4.1.0" rel="5.el9_6"/>
  <changelog author="Ales Nezbeda &lt;anezbeda@redhat.com&gt; - 4.1.0-4" date="1758196800">- Rebuilt for inclusion of new subpackages
- Resolves: RHEL-113420</changelog>
</package>
<package pkgid="328325659b8a494be7b3a9d009e542e32f033cc5f81d670d5922088c037e3da8" name="tesseract-tools" arch="aarch64">
  <version epoch="0" ver="4.1.1" rel="7.el9"/>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 4.1.0-2" date="1572609600">- Rebuild for ICU 65</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 4.1.1-1" date="1577448000">- Update to 4.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Pete Walter &lt;pwalter@fedoraproject.org&gt; - 4.1.1-3" date="1589630400">- Rebuild for ICU 67</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-4" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-5" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1.1-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.1.1-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a299918f3d78cf28a626afd2d2c81794614965b4c2e00d54e9194813800c50c4" name="testng" arch="noarch">
  <version epoch="0" ver="7.3.0" rel="5.el9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.14.3-12" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.1.1-1" date="1596024000">- Update to upstream version 7.1.1</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.2.0~SNAPSHOT-1" date="1596024001">- Update to upstream version 7.2.0~SNAPSHOT</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.14.3-13" date="1596024002">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.3.0-1" date="1601467200">- Update to upstream version 7.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.14.3-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.3.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.3.0-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.3.0-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7.3.0-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d8d7e876d97d72de1964fe4a58244f7ad6177c3e46c1196b7d805264c4ff5220" name="testng" arch="noarch">
  <version epoch="0" ver="7.4.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.2.0~SNAPSHOT-1" date="1596024000">- Update to upstream version 7.2.0~SNAPSHOT</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.14.3-13" date="1596024001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.3.0-1" date="1601467200">- Update to upstream version 7.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.14.3-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.3.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.3.0-3" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.4.0-1" date="1636372800">- Update to upstream version 7.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.4.0-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.4.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.4.0-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="116098d7ff5eb83eb80489fd5b9713b3291bd8dfd135cb6862da1d5c994e5a50" name="testng" arch="noarch">
  <version epoch="0" ver="7.8.0" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.6.1-3" date="1679400000">- Port to Google Guice 5</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.6.1-4" date="1680264000">- Rebuild with no changes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.6.1-5" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.8.0-1" date="1692273600">- Update to upstream version 7.8.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.8.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.0-3" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.8.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.8.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.0-6" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.8.0-14" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="6adf10433e0b774eeb59163158ce9665ab4f8e7962bf9afb7838bb776374f43a" name="testng-javadoc" arch="noarch">
  <version epoch="0" ver="7.3.0" rel="5.el9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 6.14.3-12" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.1.1-1" date="1596024000">- Update to upstream version 7.1.1</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.2.0~SNAPSHOT-1" date="1596024001">- Update to upstream version 7.2.0~SNAPSHOT</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.14.3-13" date="1596024002">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.3.0-1" date="1601467200">- Update to upstream version 7.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.14.3-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.3.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.3.0-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.3.0-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 7.3.0-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="800e5b6932fc8d2c38ccfd5824b75e7537220250ee9fa0c739a669b17308f6f9" name="testng-javadoc" arch="noarch">
  <version epoch="0" ver="7.4.0" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.2.0~SNAPSHOT-1" date="1596024000">- Update to upstream version 7.2.0~SNAPSHOT</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.14.3-13" date="1596024001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.3.0-1" date="1601467200">- Update to upstream version 7.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 6.14.3-14" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.3.0-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.3.0-3" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.4.0-1" date="1636372800">- Update to upstream version 7.4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.4.0-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.4.0-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.4.0-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="045795161bc0e02c086f28bf54a0fa025634ecaf1991880d9e862446b80c8f55" name="testng-javadoc" arch="noarch">
  <version epoch="0" ver="7.8.0" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.6.1-3" date="1679400000">- Port to Google Guice 5</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.6.1-4" date="1680264000">- Rebuild with no changes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.6.1-5" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 7.8.0-1" date="1692273600">- Update to upstream version 7.8.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.8.0-2" date="1693569600">- Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.0-3" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.8.0-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 7.8.0-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 7.8.0-6" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 7.8.0-14" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="630112e22bef4296d0fdbdf2ab30fa4430d56255dc7c8e58ad8ed1a556190576" name="texlive-acronym" arch="noarch">
  <version epoch="9" ver="20200406" rel="26.el9_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-18" date="1622203200">- Related: #1960650 - fixed license tags and rpath issue</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-19" date="1624190400">- Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-20" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-21" date="1625486400">- Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-22" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-23" date="1634644800">- Resolves: #2014453, runtime requirement on python-unversioned-command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-24" date="1639310400">- Related: #2014453, fixed dependencies</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-25" date="1644840000">- Resolves: #2031879, fix invalid symlink to mktexmf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-26" date="1685102400">- Resolves: #2209872, CVE-2023-32700</changelog>
</package>
<package pkgid="876e2bc1a6bccc37359e7557a0fa3b7338ded0d77807f65b2dc6d2f111131bec" name="texlive-luajittex" arch="aarch64">
  <version epoch="9" ver="20200406" rel="26.el9_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-18" date="1622203200">- Related: #1960650 - fixed license tags and rpath issue</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-19" date="1624190400">- Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-20" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-21" date="1625486400">- Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-22" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-23" date="1634644800">- Resolves: #2014453, runtime requirement on python-unversioned-command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-24" date="1639310400">- Related: #2014453, fixed dependencies</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-25" date="1644840000">- Resolves: #2031879, fix invalid symlink to mktexmf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-26" date="1685102400">- Resolves: #2209872, CVE-2023-32700</changelog>
</package>
<package pkgid="02dcdb352743cf0d8915783312828f42963939fd52c915ec7eb8b2c38fe7dafe" name="texlive-preview" arch="noarch">
  <version epoch="9" ver="20200406" rel="26.el9_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-18" date="1622203200">- Related: #1960650 - fixed license tags and rpath issue</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-19" date="1624190400">- Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-20" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-21" date="1625486400">- Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-22" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-23" date="1634644800">- Resolves: #2014453, runtime requirement on python-unversioned-command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-24" date="1639310400">- Related: #2014453, fixed dependencies</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-25" date="1644840000">- Resolves: #2031879, fix invalid symlink to mktexmf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-26" date="1685102400">- Resolves: #2209872, CVE-2023-32700</changelog>
</package>
<package pkgid="d1fe03cc2a3b9f6827473b12bf8f09eff947dbb114ca434562918e239bb26d5c" name="texlive-relsize" arch="noarch">
  <version epoch="9" ver="20200406" rel="26.el9_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-18" date="1622203200">- Related: #1960650 - fixed license tags and rpath issue</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-19" date="1624190400">- Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-20" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-21" date="1625486400">- Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-22" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-23" date="1634644800">- Resolves: #2014453, runtime requirement on python-unversioned-command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-24" date="1639310400">- Related: #2014453, fixed dependencies</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-25" date="1644840000">- Resolves: #2031879, fix invalid symlink to mktexmf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-26" date="1685102400">- Resolves: #2209872, CVE-2023-32700</changelog>
</package>
<package pkgid="27c15aa6d481162faf134bf10e78c7ee7860c25b6cfd9263f97cc4401202bd5b" name="texlive-sfmath" arch="noarch">
  <version epoch="9" ver="20200406" rel="26.el9_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-18" date="1622203200">- Related: #1960650 - fixed license tags and rpath issue</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-19" date="1624190400">- Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-20" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-21" date="1625486400">- Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-22" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-23" date="1634644800">- Resolves: #2014453, runtime requirement on python-unversioned-command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-24" date="1639310400">- Related: #2014453, fixed dependencies</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-25" date="1644840000">- Resolves: #2031879, fix invalid symlink to mktexmf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-26" date="1685102400">- Resolves: #2209872, CVE-2023-32700</changelog>
</package>
<package pkgid="e7c8054b3f83cc4c71ac32722a10d207d8a2c17edbb6fb3cb4cab6fe170c7cbb" name="texlive-xpatch" arch="noarch">
  <version epoch="9" ver="20200406" rel="26.el9_2"/>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-18" date="1622203200">- Related: #1960650 - fixed license tags and rpath issue</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200327-19" date="1624190400">- Related: #1960650, add create-clean-texlive.sh to generate clean tarball from released build tarballs, update URLs</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-20" date="1624363200">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-21" date="1625486400">- Related: #1960650, updated create-clean-texlive.sh, dropped ps2pk</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 9:20200406-22" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-23" date="1634644800">- Resolves: #2014453, runtime requirement on python-unversioned-command</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-24" date="1639310400">- Related: #2014453, fixed dependencies</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-25" date="1644840000">- Resolves: #2031879, fix invalid symlink to mktexmf</changelog>
  <changelog author="Than Ngo &lt;than@redhat.com&gt; - 9:20200406-26" date="1685102400">- Resolves: #2209872, CVE-2023-32700</changelog>
</package>
<package pkgid="137fc78c0f70fcfba590138504b4c1f2dfac8cbca6597e532805f772d6e258ed" name="texttopaps" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.8-45" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.8-46" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Akira TAGOH &lt;tagoh@redhat.com&gt; - 0.7.1-1" date="1602158400">- New upstream release.
  Resolves: rhbz#1254352
- Sub-package texttopaps with old code.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.1-2" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.1-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.1-4" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="3e866624ebdfd8dcec794bef1c40a94d202f4f1749cf395c8d9d2fbe958030e6" name="thai-scalable-laksaman-fonts" arch="noarch">
  <version epoch="0" ver="0.7.2" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.5-7" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.7.2-1" date="1588852800">- Update to 0.7.2
- Switch to use OpenType Font Format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.2-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.7.2-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.2-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.7.2-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e7bf88fb97d1138cdec753af212b02b805042bba63217f2ff4f5562e45419c9d" name="tix-doc" arch="aarch64">
  <version epoch="1" ver="8.4.3" rel="33.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:8.4.3-28" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:8.4.3-29" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 1:8.4.3-30" date="1606392000">- Use make macros, patch by Tom Stellard &lt;tstellar@redhat.com&gt;</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:8.4.3-31" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:8.4.3-32" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:8.4.3-33" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="d3905a7a013d516bb10e2fb47cb822296044934b9d27289c3efda2d42c18c18a" name="tog-pegasus-test" arch="aarch64">
  <version epoch="2" ver="2.14.1" rel="68.el9"/>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.14.1-65" date="1744372800">- Update OpenSSL certificates set up
  Resolves: RHEL-81721
- Remove deprecated path from systemd service file
  Resolves: RHEL-81716</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.14.1-66" date="1758888000">- Use systemd-sysusers for the 'pegasus' user and group creation
- Fix Requires of subpackages
  Related: RHEL-90737
- Add support for Image Mode
  Resolves: RHEL-90737</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.14.1-67" date="1770120000">- Add support for post-quantum cryptography
  Resolves: RHEL-127514</changelog>
  <changelog author="Vitezslav Crhonek &lt;vcrhonek@redhat.com&gt; - 2:2.14.1-68" date="1771416000">- Fix multilib issue with systemd-sysusers config
  Related: RHEL-90737</changelog>
</package>
<package pkgid="036aff7b41f396d7970c4de4ba6658d915d7ec04fdaf39daee5e0b4bd2a87ec8" name="tokyocabinet-devel-doc" arch="noarch">
  <version epoch="0" ver="1.4.48" rel="19.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.48-15" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.48-16" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.48-17" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.48-18" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.48-19" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="fc2fe78ee302eb79ccfcddda8fa04b76f3fde1b979d5b8092547895b4f77756b" name="tomcat-java-jdk11" arch="noarch">
  <version epoch="1" ver="9.0.62" rel="16.el9"/>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-1" date="1673870400">- Update to 9.0.62. Related: rhbz#2160511
- Remove examples webapps from subpackage
- Remove maven artifacts from build as they aren't very useful
- Drop JSVC support as it's not very useful these days
- Drop geronimo-saaj as it's no longer required
- Drop geronimo-jaxrpc, which provided the webservices naming factory resources that are generally unused
- Cleaning up some unused deps and system properties
- Add Java 9 start-up parameters to allow reflection
- Add bnd-annotation which is in bndlib
- Add fixes for memory leak which have been fixed in 9.0.64</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-2" date="1675425600">- Add conflicts with the pki-servlet-engine package</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 1:9.0.62-3" date="1675771200">- Add conflicts declaration to the appropriate subpackages
- Fix malformed DTD file that caused problems with rpminspect</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-4" date="1676462400">- Bump release to run the tier1 test</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-11" date="1677153600">- Bump release so that the NVR on RHEL-9 is higher than RHEL-8</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-12" date="1687348800">- Resolves: #2189675 Missing Tomcat POM files in RHEL 9.3
- Resolves: #2173872 Remove java-11-openjdk-headles as a tomcat dependency
- Resolves: #2181461 CVE-2023-28708 tomcat: not including the secure attribute causes information
- Resolves: #2210632 CVE-2023-28709
- Resolves: #2184133 Add Obsoletes to tomcat package
- Update patch command
- Update source to use jws tomcat</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-13" date="1690372800">- Resolves: #2189675 Missing Tomcat POM files in RHEL 9.3</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-14" date="1690891200">- Resolves: #2210632 CVE-2023-28709 tomcat</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 1:9.0.62-15" date="1692964800">- Resolves: #2184133 Fix bug in Obsoletes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 1:9.0.62-16" date="1692964801">- Related: #2184133 Declare file conflicts</changelog>
</package>
<package pkgid="b74acd612362cd2af6c32bbdedb86c838cbb1b89e0b6b9caad1dc43b3ce6b773" name="tomcat-java-jdk17" arch="noarch">
  <version epoch="1" ver="9.0.62" rel="16.el9"/>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-1" date="1673870400">- Update to 9.0.62. Related: rhbz#2160511
- Remove examples webapps from subpackage
- Remove maven artifacts from build as they aren't very useful
- Drop JSVC support as it's not very useful these days
- Drop geronimo-saaj as it's no longer required
- Drop geronimo-jaxrpc, which provided the webservices naming factory resources that are generally unused
- Cleaning up some unused deps and system properties
- Add Java 9 start-up parameters to allow reflection
- Add bnd-annotation which is in bndlib
- Add fixes for memory leak which have been fixed in 9.0.64</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-2" date="1675425600">- Add conflicts with the pki-servlet-engine package</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 1:9.0.62-3" date="1675771200">- Add conflicts declaration to the appropriate subpackages
- Fix malformed DTD file that caused problems with rpminspect</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-4" date="1676462400">- Bump release to run the tier1 test</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-11" date="1677153600">- Bump release so that the NVR on RHEL-9 is higher than RHEL-8</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-12" date="1687348800">- Resolves: #2189675 Missing Tomcat POM files in RHEL 9.3
- Resolves: #2173872 Remove java-11-openjdk-headles as a tomcat dependency
- Resolves: #2181461 CVE-2023-28708 tomcat: not including the secure attribute causes information
- Resolves: #2210632 CVE-2023-28709
- Resolves: #2184133 Add Obsoletes to tomcat package
- Update patch command
- Update source to use jws tomcat</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-13" date="1690372800">- Resolves: #2189675 Missing Tomcat POM files in RHEL 9.3</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-14" date="1690891200">- Resolves: #2210632 CVE-2023-28709 tomcat</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 1:9.0.62-15" date="1692964800">- Resolves: #2184133 Fix bug in Obsoletes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 1:9.0.62-16" date="1692964801">- Related: #2184133 Declare file conflicts</changelog>
</package>
<package pkgid="409da2b51b1ca7bd5f073bcec48d4ba7e680384b4014a28a12b4880b61947607" name="tomcat-java-jdk8" arch="noarch">
  <version epoch="1" ver="9.0.62" rel="16.el9"/>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-1" date="1673870400">- Update to 9.0.62. Related: rhbz#2160511
- Remove examples webapps from subpackage
- Remove maven artifacts from build as they aren't very useful
- Drop JSVC support as it's not very useful these days
- Drop geronimo-saaj as it's no longer required
- Drop geronimo-jaxrpc, which provided the webservices naming factory resources that are generally unused
- Cleaning up some unused deps and system properties
- Add Java 9 start-up parameters to allow reflection
- Add bnd-annotation which is in bndlib
- Add fixes for memory leak which have been fixed in 9.0.64</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-2" date="1675425600">- Add conflicts with the pki-servlet-engine package</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 1:9.0.62-3" date="1675771200">- Add conflicts declaration to the appropriate subpackages
- Fix malformed DTD file that caused problems with rpminspect</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-4" date="1676462400">- Bump release to run the tier1 test</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-11" date="1677153600">- Bump release so that the NVR on RHEL-9 is higher than RHEL-8</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-12" date="1687348800">- Resolves: #2189675 Missing Tomcat POM files in RHEL 9.3
- Resolves: #2173872 Remove java-11-openjdk-headles as a tomcat dependency
- Resolves: #2181461 CVE-2023-28708 tomcat: not including the secure attribute causes information
- Resolves: #2210632 CVE-2023-28709
- Resolves: #2184133 Add Obsoletes to tomcat package
- Update patch command
- Update source to use jws tomcat</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-13" date="1690372800">- Resolves: #2189675 Missing Tomcat POM files in RHEL 9.3</changelog>
  <changelog author="Hui Wang &lt;huwang@redhat.com&gt; - 1:9.0.62-14" date="1690891200">- Resolves: #2210632 CVE-2023-28709 tomcat</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 1:9.0.62-15" date="1692964800">- Resolves: #2184133 Fix bug in Obsoletes</changelog>
  <changelog author="Coty Sutherland &lt;csutherl@redhat.com&gt; - 1:9.0.62-16" date="1692964801">- Related: #2184133 Declare file conflicts</changelog>
</package>
<package pkgid="ea8b44cdd66a4694b01d246b1eed91be50d6bbac85a591079c86821fb8fc628b" name="totem" arch="aarch64">
  <version epoch="1" ver="3.38.2" rel="2.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.38.1-1" date="1624276800">+ totem-3.38.1-1
- Update to 3.38.1
- Resolves: rhbz#1972740</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:3.38.1-2" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.38.2-1" date="1634558400">+ totem-3.38.2-1
- Update to 3.38.2
- Resolves: rhbz#2014992</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.2-2" date="1684756800">- Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
- Resolves: rhbz#1949422</changelog>
</package>
<package pkgid="4d0cf317e8fe4ced6ab6706d3fff612ab2921950fe8b6fe476b107ae0f0a2b67" name="totem-devel" arch="aarch64">
  <version epoch="1" ver="3.38.2" rel="2.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.38.1-1" date="1624276800">+ totem-3.38.1-1
- Update to 3.38.1
- Resolves: rhbz#1972740</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:3.38.1-2" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.38.2-1" date="1634558400">+ totem-3.38.2-1
- Update to 3.38.2
- Resolves: rhbz#2014992</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.2-2" date="1684756800">- Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
- Resolves: rhbz#1949422</changelog>
</package>
<package pkgid="b752a37a1b8cfab64bed9b7f581080ddea395185e7881ad681fbd6a7d41da293" name="totem-pl-parser-devel" arch="aarch64">
  <version epoch="0" ver="3.26.6" rel="2.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.4-1" date="1573560000">+ totem-pl-parser-3.26.4-1
- Update to 3.26.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.26.4-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.4-3" date="1581681600">+ totem-pl-parser-3.26.4-3
- Disable quvi support on RHEL</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.5-1" date="1582891200">+ totem-pl-parser-3.26.5-1
- Update to 3.26.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.26.5-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.5-3" date="1601380800">+ totem-pl-parser-3.26.5-3
- Disable quvi, upstream is dead, and it doesn't compile with lua 5.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.26.5-4" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.26.5-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.26.6-1" date="1624881600">+ totem-pl-parser-3.26.6-1
- Update to 3.26.6
- Resolves: rhbz#1976722</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.26.6-2" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="11cee0fa4f2ba16c87d8de5c5defb775e9c87c867e8272e3336690cc6233f88d" name="totem-video-thumbnailer" arch="aarch64">
  <version epoch="1" ver="3.38.2" rel="2.el9"/>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.38.1-1" date="1624276800">+ totem-3.38.1-1
- Update to 3.38.1
- Resolves: rhbz#1972740</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:3.38.1-2" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Bastien Nocera &lt;bnocera@redhat.com&gt; - 3.38.2-1" date="1634558400">+ totem-3.38.2-1
- Update to 3.38.2
- Resolves: rhbz#2014992</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.38.2-2" date="1684756800">- Use conflicts for totem-video-thumbnailer split instead of self-obsoletes
- Resolves: rhbz#1949422</changelog>
</package>
<package pkgid="3558e37eeca464fdb07c240b90386def0b0a164932cc4dd58fa8fa7a899900c0" name="trace-cmd-python3" arch="aarch64">
  <version epoch="0" ver="3.3.1" rel="3.el9"/>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-1" date="1740484800">- Rebase to version 3.3.1 (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-2" date="1741694400">- Rebuild without side-tags (RHEL-76155)</changelog>
  <changelog author="Jerome Marchand &lt;jmarchan@redhat.com&gt; - 3.3.1-3" date="1770206400">- Fix trace messages (RHEL-86597)</changelog>
</package>
<package pkgid="d646341f6bba7a2a58bfb89974befe80b067374dbb1113288843c76c6a0f8589" name="tracker-doc" arch="noarch">
  <version epoch="0" ver="3.1.2" rel="3.el9_1"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.6-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.1.0~rc-2" date="1616155200">- Update to 3.1.0.rc, based on earlier tracker3 packaging
- Obsolete separate tracker3 packages</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.1.0~rc-3" date="1616155201">- Obsolete libtracker-control and libtracker-miner
- Add conflicts with tracker3 packages to help with the upgrade path</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.1.0-1" date="1616414400">- Update to 3.1.0</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.1.1-1" date="1617451200">- Update to 3.1.1</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.1-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 3.1.1-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 3.1.2-1" date="1629892800">- Update to 3.1.2</changelog>
  <changelog author="Tomas Popela &lt;tpopela@redhat.com&gt; - 3.1.2-2" date="1638273600">- Ship tracker-devel in CRB</changelog>
  <changelog author="Carlos Garnacho &lt;cgarnach@redhat.com&gt; - 3.1.2-3" date="1669118400">- Backport module-based libsoup support
  Resolves: rhbz#2137366</changelog>
</package>
<package pkgid="5d13f3d7ee713f6fc0a2902087f1383d9393f93e08cae13b626e35b96def96ad" name="tuned-profiles-compat" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="1.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-1" date="1723032000">- new release
  - rebased tuned to latest upstream
    related: RHEL-50568
  - clear plugin repository when stopping tuning
  - man: add description of the balanced-battery profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
</package>
<package pkgid="0d76afdb6bca25cd6cdabff6da2b0873a99500f5e0cba070a74fe8e975b57d44" name="tuned-profiles-compat" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="2.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-2" date="1781524800">- net: added more coalescing options, filter out unsupported ones
  resolves: RHEL-181668</changelog>
</package>
<package pkgid="bcfaf284fc269d75bc6c1d20ad5241de1769d12e83aa365e6ce48b76ac609acb" name="tuned-profiles-nfv" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="1.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-1" date="1723032000">- new release
  - rebased tuned to latest upstream
    related: RHEL-50568
  - clear plugin repository when stopping tuning
  - man: add description of the balanced-battery profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
</package>
<package pkgid="961cb570e29885fbc2f72a0949ced6292eec059a39411cb0740c8368b5188985" name="tuned-profiles-nfv" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="2.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-2" date="1781524800">- net: added more coalescing options, filter out unsupported ones
  resolves: RHEL-181668</changelog>
</package>
<package pkgid="7e0df8f24b95b8e10a357effd8c26d8d50c350a1cb281333a41a1717cf63abcf" name="tuned-profiles-nfv-guest" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="1.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-1" date="1723032000">- new release
  - rebased tuned to latest upstream
    related: RHEL-50568
  - clear plugin repository when stopping tuning
  - man: add description of the balanced-battery profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
</package>
<package pkgid="d6776899ccfd0bd3b2696b9b366a37640a81888ba62d9d61f6b1f1ad60d91233" name="tuned-profiles-nfv-guest" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="2.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-2" date="1781524800">- net: added more coalescing options, filter out unsupported ones
  resolves: RHEL-181668</changelog>
</package>
<package pkgid="b8fa9b2a9c2a60afcd8c65bc34572255b8462e81ead985157f7c8994ed00a084" name="tuned-profiles-nfv-host" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="1.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-1" date="1723032000">- new release
  - rebased tuned to latest upstream
    related: RHEL-50568
  - clear plugin repository when stopping tuning
  - man: add description of the balanced-battery profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
</package>
<package pkgid="2b004d0229160f2a93314e6de3ff98253a364ff50055b87357590ae82d9fa65a" name="tuned-profiles-nfv-host" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="2.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-2" date="1781524800">- net: added more coalescing options, filter out unsupported ones
  resolves: RHEL-181668</changelog>
</package>
<package pkgid="e9a306a6ebd397a1e77e3304727cef8f0820a4e174d4e2d0b00614cf61cd69f8" name="tuned-profiles-openshift" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="1.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-1" date="1723032000">- new release
  - rebased tuned to latest upstream
    related: RHEL-50568
  - clear plugin repository when stopping tuning
  - man: add description of the balanced-battery profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
</package>
<package pkgid="72c74737676499f15e3bf99f1c79e5958dcbd4f2c43d7973ead685fa954d39d3" name="tuned-profiles-openshift" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="2.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-2" date="1781524800">- net: added more coalescing options, filter out unsupported ones
  resolves: RHEL-181668</changelog>
</package>
<package pkgid="ccb408ccdf7a08f85dba6b1c8ab615c6914349d8a5df9eb53e5581f5b2717c32" name="tuned-profiles-realtime" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="1.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-1" date="1723032000">- new release
  - rebased tuned to latest upstream
    related: RHEL-50568
  - clear plugin repository when stopping tuning
  - man: add description of the balanced-battery profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
</package>
<package pkgid="b9de4cc43d9fddaf4e3727a63cf2b19a043080262bce490bb5e8ec80edd01b18" name="tuned-profiles-realtime" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="2.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-2" date="1781524800">- net: added more coalescing options, filter out unsupported ones
  resolves: RHEL-181668</changelog>
</package>
<package pkgid="a619831b8d13288e6a59c9f697cbac6498f0e41265520bfce00a360f2971774a" name="tuned-utils-systemtap" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="1.el9"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-1" date="1723032000">- new release
  - rebased tuned to latest upstream
    related: RHEL-50568
  - clear plugin repository when stopping tuning
  - man: add description of the balanced-battery profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
</package>
<package pkgid="494bbf5d9e950341503a11da76788cf87bef502de91d5f9a092a19458b1a7127" name="tuned-utils-systemtap" arch="noarch">
  <version epoch="0" ver="2.27.0" rel="2.el9_8"/>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.24.0-2" date="1731931200">- Fixed privileged execution of arbitrary scripts by active local user,
  (CVE-2024-52336)
  Resolves: RHEL-66638
- Added sanity checks for API methods parameters, (CVE-2024-52337)
  Resolves: RHEL-66615</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-0.1.rc1" date="1737288000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-70457
  - tuned-ppd: removed the use of StrEnum
  - tuned-ppd: fixed traceback
  - tuned-ppd: multiple fixes and updates
  - docs: plugins docs are now automatically generated from the docstrings
  - plugin_cpu: fixed no_turbo boolean option parsing
    resolves: RHEL-51760
  - plugin_cpu: allowed raw energy_performance_preference values
  - plugin_vm: added support for dirty_(bytes|ratio) sysctl parameters
    resolves: RHEL-58820
  - plugin_bootloader: added variables to BLS entries only if grub is used
  - plugin_scheduler: do not assume that perf events have type attribute
  - plugin_scheduler: updated sched knobs for kernels 6.6+
  - plugin_scheduler: log process info when its affinity cannot be changed
  - plugin_scheduler: postpone cgroup blacklist check, double-check after fail
    resolves: RHEL-72981
  - plugin_scheduler: made perf support optional
  - plugin_net: added support for hotplug and rename
    resolves: RHEL-60906
  - makefile: added support for installation to custom $BINDIR/$SBINDIR
  - functions: dropped cpuspeed support</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.0-1" date="1738324800">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - sap-hana: Set transparent_hugepages to madvise
  - plugin_bootloader: export Grub variables to make them available in submenus
  - utils.commands: fixed CPU online detection when not present
  - plugin_net: handled cqe-mode-rx ethtool option
  - profiles: correct CPU governor settings</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.25.1-1" date="1738670400">- new release
  - rebased tuned to latest upstream
    related: RHEL-70457
  - plugins: added missing instance parameters
  - disk: added missing remove parameter
  - plugin_scheduler: added switch to disable processing of kthreads
  - Makefile: added support for installation to custom LIBEXECDIR
  - functions: create a new parser object for each string expansion
    resolves: RHEL-75773</changelog>
  <changelog author="Pavol &#x17D;&#xE1;&#x10D;ik &lt;pzacik@redhat.com&gt; - 2.25.1-2" date="1749124800">- Fix handling of kernel arguments on bootc systems
  resolves: RHEL-45836
  resolves: RHEL-86814</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-0.1.rc1" date="1755432000">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-94808
  - tuned-ppd: renamed thinkpad_function_keys as sysfs_acpi_monitor
  - tuned-ppd: enabled sysfs_acpi_monitor by default
  - tuned-ppd: fixed inotify watch for performance degradation
  - tuned-ppd: pinned virtual files in memory for inotify
  - fixed instance priority inheritance
  - hotplug: added fixes for device remove race condition
  - tuned-main.conf: added startup_udev_settle_wait option
  - functions: silenced errors if module kvm_intel does not exist
    resolves: RHEL-79943
  - functions: make calc_isolated_cores return CPU ranges
    resolves: RHEL-75751
  - scsi: used 'med_power_with_dipm' for SATA ALPM
  - scsi: do not set ALPM on external SATA ports
  - network_latency: Set non-zero rcutree.nohz_full_patience_delay
  - realtime: Disable appropriate P-State drivers
    resolves: RHEL-85637
  - plugin_disk: added support for MMC (MultiMediaCard) devices
  - udev: fix possible traceback in device matcher
  - udev-settle: obey udev buffer size and handle possible tracebacks
  - daemon: re-raise daemon init exception in no-daemon mode
    resolves: RHEL-71304
  - vm: deprecate dirty_ratio in favour of dirty_bytes with percents
    resolves: RHEL-101578
  - gui: fix the profile deleter script</changelog>
  <changelog author="Jaroslav &#x160;karvada  &lt;jskarvad@redhat.com&gt; - 2.26.0-1" date="1756123200">- new release
  - rebased tuned to latest upstream
    related: RHEL-94808</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-0.1.rc1" date="1770724800">- new release
  - rebased tuned to latest upstream
    resolves: RHEL-123607
  - cpu-partitioning: autodetect dracut hook directory, systemd workaround
  - openshift: optimize TCP settings for high throughput and low latency
  - profiles: Set boost=1 in *-performance profiles
  - sap-hana: force latency to 70 us, not to C-states
  - man: fixed instance_acquire_devices example in tuned-adm man
  - spec: use correct python interpreter for documentation installation
  - sysctl: add reapply_sysctl_exclude option
  - ppd: ask tuned recommend for base profile</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-1" date="1771761600">- new release
  - rebased tuned to latest upstream
    related: RHEL-123607</changelog>
  <changelog author="Jaroslav &#x160;karvada &lt;jskarvad@redhat.com&gt; - 2.27.0-2" date="1781524800">- net: added more coalescing options, filter out unsupported ones
  resolves: RHEL-181668</changelog>
</package>
<package pkgid="465f7ca84c06b78759319f604ac41b21234532e75ecd8f88a1aadcf6130548fb" name="ucrt64-binutils" arch="aarch64">
  <version epoch="0" ver="2.43.1" rel="2.el9"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.40-2" date="1681473600">- Backport fix for CVE-2023-1972</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.40-3" date="1686744000">- Backport fix for Backport fix for
  https://sourceware.org/bugzilla/show_bug.cgi?id=30079</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.40-4" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.41-1" date="1697544000">- Update to 2.41</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.41-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.41-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.42-1" date="1708257600">- Update to 2.42</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.42-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 2.43.1-1" date="1724155200">- Update to 2.43.1</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@fedoraproject.org&gt; - 2.43.1-2" date="1727870400">- Fix invalid SPDX expression in license tag</changelog>
</package>
<package pkgid="19d5d644752f32b55a35e6bbd33541609f776a18d6b11ac9e95e9539ab3640ae" name="ucrt64-cpp" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="9cb9fcd3dc0da142054bf3c0964c4928680707a8b3f48f2270794469ea132601" name="ucrt64-crt" arch="noarch">
  <version epoch="0" ver="12.0.0" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 11.0.0-1" date="1682856000">- Update to 11.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 11.0.1-1" date="1692273600">- Update to 11.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt;" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 12.0.0-1" date="1721131200">- Update to 12.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0.0.2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Marc-Andr&#xE9; Lureau &lt;marcandre.lureau@redhat.com&gt; - 12.0.0-3" date="1721908800">- Add libbcryptprimitives.dll
  Related: https://bugzilla.redhat.com/show_bug.cgi?id=2299374</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 12.0.0-4" date="1727179200">- Pass --with-default-msvcrt=msvcrt when building mingw32/64 crt</changelog>
</package>
<package pkgid="3bee056bff409e1929128d37d8de194e3280efa79b108b8449d124820f70feae" name="ucrt64-filesystem" arch="noarch">
  <version epoch="0" ver="148" rel="7.el9"/>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 147-1" date="1680868800">- Set mingw_env before in run_mingw_make</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 147-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 147-3" date="1694433600">- Add dependency on cmake-rpm-macros</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 148-1" date="1694606400">- Add pkgconfig provides</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 148-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 148-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 148-4" date="1717675200">- Set __debug_package 1 in %mingw_debug_package (#2284193)</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 148-5" date="1718193600">- Rust fixes</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 148-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 148-7" date="1725710400">- Fix meson deprecation warnings</changelog>
</package>
<package pkgid="572d31d48809bf75fdd3677f73f570167e30dbe74f4316c8d1c7157bbede36e9" name="ucrt64-gcc" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="67709f390dca17fadea92045c1f285e284b133237c436e2af9b8f52af4814644" name="ucrt64-gcc-c++" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="ce580ad1b362468c1b04b267c53e1eafeb738a6b3d734ca8402da4fef25a0f19" name="ucrt64-gcc-gfortran" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="7a879e5c0797cc01ef3d3d7d7e6db7b0478843b13c3457e00f2084fe3d25f79b" name="ucrt64-gcc-objc++" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="9bf1d7ab5327b57dd657f42e52c12351bfbcd35e95fb48edc2ed2fa9904128ca" name="ucrt64-gcc-objc" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="15b0a481dcb074b94da6ee7f6e6be775d2714fd1c7c3c8d121aa70d7c34a3227" name="ucrt64-gcc-plugin-devel" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="53814256afa10e2d4b7f8131dcbb894982e4552e137bc0bba4ff4eb481dd5c0e" name="ucrt64-headers" arch="noarch">
  <version epoch="0" ver="12.0.0" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.0.0-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 11.0.0-1" date="1682856000">- Update to 11.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.0.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 11.0.1-1" date="1692273600">- Update to 11.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.0.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.0.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 12.0.0-1" date="1721131200">- Update to 12.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0.0-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 12.0.0-3" date="1727179200">- Pass --with-default-msvcrt=msvcrt when building mingw32/64-headers</changelog>
</package>
<package pkgid="8c4d120d426fbec3243c3b082fea295762fc0923776d0bf85b36de5c6bf9ea0f" name="ucrt64-libgcc" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="f748d295c3a03516464e1204397c99a10e7a2d5f50548f9e047e320144465700" name="ucrt64-libgomp" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="caaa1231d49974a81da33b31ba5353f9f7b9ec33715ad8ab6d81cc6bc4327101" name="ucrt64-libstdc++" arch="aarch64">
  <version epoch="0" ver="14.2.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.2.1-7" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.0.1-1" date="1707307200">- Update to 14.0.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-1" date="1715428800">- Update to 14.1.1</changelog>
  <changelog author="Zephyr Lykos &lt;fedora@mochaa.ws&gt; - 14.1.1-2" date="1717761600">- Build GCC with plugin support</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-3" date="1718020800">- Update to 20240607 snapshot</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.1.1-4" date="1721131200">- Update to 20240701 snapshot</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 14.1.1-5" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-1" date="1724760000">- Update to 14.2.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 14.2.1-2" date="1727697600">- Rebuild for fixed default msvcrt in mingw-crt</changelog>
  <changelog author="Neal Gompa &lt;ngompa@fedoraproject.org&gt; - 14.2.1-3" date="1728216000">- Rebuild on fixed mingw-crt</changelog>
</package>
<package pkgid="f63d5bf548ba1db6368d754d29c958d4bd8a009167b9f76d7bbfd55d1d4866eb" name="ucrt64-winpthreads" arch="noarch">
  <version epoch="0" ver="12.0.0" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.0.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 11.0.0-1" date="1682856000">- Update to 11.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.0.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 11.0.1-1" date="1692273600">- Update to 11.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.0.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.0.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 12.0.0-1" date="1721131200">- Update to 12.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0.0-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 12.0.0-3" date="1728907200">- Rebuild for fixed mingw-crt</changelog>
</package>
<package pkgid="2959d1192bfddbc241b9cb537a6aeea4668b1ab180d6339d3faa9f00c6a3397e" name="ucrt64-winpthreads-static" arch="noarch">
  <version epoch="0" ver="12.0.0" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 10.0.0-3" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 11.0.0-1" date="1682856000">- Update to 11.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.0.0-2" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 11.0.1-1" date="1692273600">- Update to 11.0.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.0.1-2" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 11.0.1-3" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 12.0.0-1" date="1721131200">- Update to 12.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0.0-2" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 12.0.0-3" date="1728907200">- Rebuild for fixed mingw-crt</changelog>
</package>
<package pkgid="f7f197e4e8c6562bca0faee979443d891f9f53c11947be38290bebf91b937d47" name="ucrt64-zlib" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.12-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.2.13-1" date="1670932800">- Update to 1.2.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.3.1-1" date="1706702400">- Update to 1.3.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@nil.im&gt; - 1.3.1-2" date="1711713600">- Build UCRT64 package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="36780a1d959f7c28873845bd10a7621bc589658f899d2a3af3ab9d517b6542bc" name="ucrt64-zlib-static" arch="noarch">
  <version epoch="0" ver="1.3.1" rel="3.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.12-2" date="1658404800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.2.13-1" date="1670932800">- Update to 1.2.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-2" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-3" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-4" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2.13-5" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 1.3.1-1" date="1706702400">- Update to 1.3.1</changelog>
  <changelog author="Jonathan Schleifer &lt;js@nil.im&gt; - 1.3.1-2" date="1711713600">- Build UCRT64 package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.1-3" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
</package>
<package pkgid="2086c3bac7ef4a6623aa5bf82b7b04bf02a99d23f5df8daae11782f70ae10d5f" name="ucs-miscfixed-opentype-fonts" arch="noarch">
  <version epoch="0" ver="0.3" rel="29.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-21" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-22" date="1580990400">- Provide OpenType Bitmap fonts
- Add ucs-miscfixed-opentype-fonts sub package</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-23" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peng Wu &lt;pwu@redhat.com&gt; - 0.3-24" date="1609243200">- Rebuilt with fonttosfnt 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.3-25" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.3-26" date="1614686400">- Resolves: rhbz#1933581 - Don't BuildRequires xorg-x11-font-utils</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-27" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Parag Nemade &lt;pnemade AT redhat DOT com&gt; - 0.3-28" date="1621598400">- Resolves:rhbz#1962002 - Add gating tests</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.3-29" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="2745188dee701e4e2b221ddb908639d200a85f969af03b25add18789c09d5693" name="ucx-ib-mlx5" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="2.el9"/>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1.16.0-1" date="1714564800">- Update to upstream release 1.16.0
- Resolves: RHEL-24468, RHEL-31249</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1.17.0-1" date="1730894400">- Update to upstream release 1.17.0
- Resolves: RHEL-52883</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1.17.0-2" date="1730894401">- Fix build for ppc64le
- Resolves: RHEL-52883</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1.18.1-1" date="1752062400">- Update to upstream release 1.18.1
- Resolves: RHEL-94447</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1.19.0-1" date="1765368000">- Update to upstream release 1.19.0
- Resolves: RHEL-98268</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1.19.0-2" date="1765972800">- bump release to rebuild in sidetag
- Resolves: RHEL-98268</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1.19.1-1" date="1767614400">- Update to upstream release 1.19.1
- Resolves: RHEL-98268</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 1.19.1-2" date="1769169600">- Rebuilt for RHEL-9.8
- Resolves: RHEL-98268</changelog>
</package>
<package pkgid="d0e18249b8139538a56d5790ecad30eda26a84cf00a58244e83d53938a8534cb" name="umockdev" arch="aarch64">
  <version epoch="0" ver="0.17.13" rel="2.el9"/>
  <changelog author="Packit Service &lt;user-cont-team+packit-service@redhat.com&gt; - 0.17.2-1" date="1641816000">- preload: Wrap statx() and fstatat(), to fix `ls` and other tools on
  recent glibc versions. (#160)</changelog>
  <changelog author="Packit Service &lt;user-cont-team+packit-service@redhat.com&gt; - 0.17.5-1" date="1642507200">- Relax overzealous stat nlink unit test</changelog>
  <changelog author="Packit Service &lt;user-cont-team+packit-service@redhat.com&gt; - 0.17.6-1" date="1642766400">- Increase uevent buffer size (#167)
- Skip /umockdev-testbed-vala/detects_running_outside_testbed during normal
  builds for the time being, as it is brittle on several architectures (#169)</changelog>
  <changelog author="Packit Service &lt;user-cont-team+packit-service@redhat.com&gt; - 0.17.7-1" date="1646136000">- Fix uevent race condition in umockdev_testbed_add_from_string()</changelog>
  <changelog author="Packit Service &lt;user-cont-team+packit-service@redhat.com&gt; - 0.17.8-1" date="1648036800">- Fix some potential crashes spotted by Coverity
- Enable Fedora builds and bodhi updates via packit</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.17.9-1" date="1649592000">- preload: Wrap fortified version of readlinkat (thanks Martin Liska)</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.17.10-1" date="1652184000">- Adjust to systemd 251-rc2: Set $SYSTEMD_DEVICE_VERIFY_SYSFS, parse new udevadm format, update tests</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.17.12-1" date="1652961600">- Work around packit propose_downstream bug</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.17.13-1" date="1653912000">- preload: Wrap fstatfs(), to work with systemd 251 also with Python tests
- Fix tests in Gentoo sandbox build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17.13-2" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="992778166e6c931a25d4c007bd215e29ed4004db8add823a72e48c39a9f953fa" name="umockdev-devel" arch="aarch64">
  <version epoch="0" ver="0.17.13" rel="2.el9"/>
  <changelog author="Packit Service &lt;user-cont-team+packit-service@redhat.com&gt; - 0.17.2-1" date="1641816000">- preload: Wrap statx() and fstatat(), to fix `ls` and other tools on
  recent glibc versions. (#160)</changelog>
  <changelog author="Packit Service &lt;user-cont-team+packit-service@redhat.com&gt; - 0.17.5-1" date="1642507200">- Relax overzealous stat nlink unit test</changelog>
  <changelog author="Packit Service &lt;user-cont-team+packit-service@redhat.com&gt; - 0.17.6-1" date="1642766400">- Increase uevent buffer size (#167)
- Skip /umockdev-testbed-vala/detects_running_outside_testbed during normal
  builds for the time being, as it is brittle on several architectures (#169)</changelog>
  <changelog author="Packit Service &lt;user-cont-team+packit-service@redhat.com&gt; - 0.17.7-1" date="1646136000">- Fix uevent race condition in umockdev_testbed_add_from_string()</changelog>
  <changelog author="Packit Service &lt;user-cont-team+packit-service@redhat.com&gt; - 0.17.8-1" date="1648036800">- Fix some potential crashes spotted by Coverity
- Enable Fedora builds and bodhi updates via packit</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.17.9-1" date="1649592000">- preload: Wrap fortified version of readlinkat (thanks Martin Liska)</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.17.10-1" date="1652184000">- Adjust to systemd 251-rc2: Set $SYSTEMD_DEVICE_VERIFY_SYSFS, parse new udevadm format, update tests</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.17.12-1" date="1652961600">- Work around packit propose_downstream bug</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.17.13-1" date="1653912000">- preload: Wrap fstatfs(), to work with systemd 251 also with Python tests
- Fix tests in Gentoo sandbox build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17.13-2" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="75b3f8d4d8a5f26cc18918d97c67378156230170bddbda4fe6a778b88c17f478" name="unicode-emoji" arch="noarch">
  <version epoch="0" ver="13.0" rel="5.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-3" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 13.0-1" date="1580990400">- Update to Unicode Emoji Data 13.0 (was released on January 29, 2020)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.0-2" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 13.0-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 13.0-4" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 13.0-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="4f15c20dd021fde715934905bddeb068228952bf46d143ba74e2c72beb4a0aea" name="univocity-parsers" arch="noarch">
  <version epoch="0" ver="2.9.1" rel="28.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-8" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-9" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.1-10" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-11" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.1-12" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.1-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-14" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.1-27" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="edf3d16b739a269d316a3127a7889fadc0a6a13483af21c8f313c6c8fead2c2d" name="univocity-parsers" arch="noarch">
  <version epoch="0" ver="2.9.1" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.0-1" date="1599825600">- Update to upstream version 2.9.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.1-1" date="1611662400">- Update to upstream version 2.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.0-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.9.1-1" date="1612008000">- Update to version 2.9.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-3" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.1-4" date="1635854400">- Fix build with OpenJDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-5" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.1-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-7" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="4b360f6b1cd3ee6d2a7035927e47025973e18bce2f8468896bbcb420acca86a6" name="univocity-parsers-javadoc" arch="noarch">
  <version epoch="0" ver="2.9.1" rel="28.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-8" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-9" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.1-10" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-11" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.1-12" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.1-13" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-14" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.1-27" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="abb508f7e77135040915e572febbc0f8af1753855010474d77908059c204b963" name="univocity-parsers-javadoc" arch="noarch">
  <version epoch="0" ver="2.9.1" rel="7.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.0-1" date="1599825600">- Update to upstream version 2.9.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.1-1" date="1611662400">- Update to upstream version 2.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.0-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.9.1-1" date="1612008000">- Update to version 2.9.1.</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.1-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-3" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.1-4" date="1635854400">- Fix build with OpenJDK 17</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-5" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.1-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-7" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="969fccc4709aae1b5035d779babb690010c141fc1f69a293c1abcb35edcae39a" name="univocity-parsers-javadoc" arch="noarch">
  <version epoch="0" ver="2.9.1" rel="8.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.9.1-6" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.9.1-7" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.9.1-8" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="8a86903b3ee069348f153098d053974944da0b1f4b4340f175794516f5140daa" name="urw-base35-fonts-legacy" arch="noarch">
  <version epoch="0" ver="20200910" rel="6.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20170801-14" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Zdenek Dohnal &lt;zdohnal@redhat.com&gt; - 20170801-15" date="1583841600">- do not mention specific OS in description</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20170801-16" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 20200910-1" date="1603368000">- Rebase to 20200910 version (#1877974)</changelog>
  <changelog author="Anna Khaitovich &lt;akhaitov@redhat.com&gt; - 20200910-2" date="1611316800">- Fix some X11-related packaging bugs (#1918947)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20200910-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 20200910-4" date="1615377600">- Require mkfontscale and mkfontdir directly (#1937125)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200910-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 20200910-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7ad32569ea7699725dda91b404160504b39537b3b6706bd2f27a48e323e35d17" name="usbguard-devel" arch="aarch64">
  <version epoch="0" ver="1.1.4" rel="2.el9"/>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.0.0-16" date="1738843200">- Install usbguard-tmpfles.conf
  Resolves: RHEL-78188</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.1.4-1" date="1762344000">- rebase to 1.1.4
- restore permissions of usbguard files
Resolves: RHEL-126440</changelog>
  <changelog author="Attila Lakatos &lt;alakatos@redhat.com&gt; - 1.1.4-2" date="1763726400">- restore permissions of usbguard files
Resolves: RHEL-126440</changelog>
</package>
<package pkgid="a55f94dfae9767d38e3929d91f8727e61be56aad9bc1027d9b0a9cbb1e13195d" name="uuid-c++-devel" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="55.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.6.2-47" date="1584360000">- Specify all perl dependencies</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.6.2-48" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-49" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-50" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-51" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.6.2-52" date="1628251200">- Rebuild to pick up new build flags from redhat-rpm-config (#1984652)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-53" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.6.2-55" date="1645704000">- fix build flags (#2044896)</changelog>
</package>
<package pkgid="fa90989b7126f95e9bfb4f53c7f3cf4dd888b8f696c58d53d3a809892ec457f2" name="uuid-dce-devel" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="55.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.6.2-47" date="1584360000">- Specify all perl dependencies</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.6.2-48" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-49" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-50" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-51" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.6.2-52" date="1628251200">- Rebuild to pick up new build flags from redhat-rpm-config (#1984652)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-53" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.6.2-55" date="1645704000">- fix build flags (#2044896)</changelog>
</package>
<package pkgid="d8555010223c04150af04f880d6de6ebdfca3b391bd32789817380bad7647eb2" name="uuid-perl" arch="aarch64">
  <version epoch="0" ver="1.6.2" rel="55.el9"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.6.2-47" date="1584360000">- Specify all perl dependencies</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 1.6.2-48" date="1592913600">- Perl 5.32 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-49" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-50" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-51" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Florian Weimer &lt;fweimer@redhat.com&gt; - 1.6.2-52" date="1628251200">- Rebuild to pick up new build flags from redhat-rpm-config (#1984652)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.6.2-53" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Hlavinka &lt;mhlavink@redhat.com&gt; - 1.6.2-55" date="1645704000">- fix build flags (#2044896)</changelog>
</package>
<package pkgid="47feabdfd4f5cab9323fd289890f44815333be60fcab94d2587250e2cbf6bf09" name="v4l-utils-devel-tools" arch="aarch64">
  <version epoch="0" ver="1.20.0" rel="6.el9"/>
  <changelog author="Tomas Pelka &lt;tpelka@redhat.com&gt; - 1.20.0-6" date="1765454400">- Rebuilt for CRB inclusion
  Resolves: RHEL-135108</changelog>
</package>
<package pkgid="b4edd6b311c0ed43fb69a9fda9725f04b688a3c8ee7e6fc74f7fc78e68fe3c94" name="v8-devel" arch="aarch64">
  <version epoch="2" ver="9.4.146.26" rel="1.16.20.2.8.el9_4"/>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.1-1" date="1689249600">- Rebase to 16.20.1
  Resolves: rhbz#2188291
  Resolves: CVE-2023-30581 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590
- Replace /usr/etc/npmrc symlink with builtin configuration
  Resolves: rhbz#2177781</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:16.20.1-2" date="1690804800">- Fix segfault that happens when processing fips-related options
  Resolves: BZ#2227796</changelog>
  <changelog author="Zuzana Svetlikova &lt;zsvetlik@redhat.com&gt; - 1:16.20.2-1" date="1693396800">- Rebase to 16.20.2
  Resolves: CVE-2023-32002 CVE-2023-32006 CVE-2023-32559</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-2" date="1697112000">- Update bundled nghttp2 to 1.57.0 (CVE-2023-44487)</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-3" date="1697198400">- Update version of bundled nghttp2 in spec file</changelog>
  <changelog author="Honza Horak &lt;hhorak@redhat.com&gt; - 1:16.20.2-4" date="1709640000">- Fix CVE-2024-22019</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-5" date="1712577600">- Backport patches for several CVEs.
  Fixes CVE-2024-22025 CVE-2024-25629 CVE-2024-27983 CVE-2024-28182</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-6" date="1712664000">- Use system OpenSSL configuration section</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-7" date="1713960000">- Backport patch for CVE-2024-27982</changelog>
  <changelog author="Jan Stan&#x11B;k &lt;jstanek@redhat.com&gt; - 1:16.20.2-8" date="1715083200">- Actually apply the patch for CVE-2024-27982</changelog>
</package>
<package pkgid="7473a7cd5c40149ba0d7c344405b45fb6acc4e47c17b4cac5dfc4f66c930b810" name="vala-doc" arch="noarch">
  <version epoch="0" ver="0.48.19" rel="1.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.12-1" date="1605787200">- Update to 0.48.12</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.12-2" date="1610712000">- Fix multilib conflicts in vala-gen-introspect</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.13-1" date="1610798400">- Update to 0.48.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.48.13-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.14-1" date="1614513600">- Update to 0.48.14</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.15-1" date="1616068800">- Update to 0.48.15</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.48.15-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.17-1" date="1620388800">- Update to 0.48.17</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.48.17-2" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.19-1" date="1629633600">- Update to 0.48.19</changelog>
</package>
<package pkgid="ad7aa4582742f7e75517f0d76a13179f95e8b0e07d2d07334a078ce77932f23a" name="valadoc" arch="aarch64">
  <version epoch="0" ver="0.48.19" rel="1.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.12-1" date="1605787200">- Update to 0.48.12</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.12-2" date="1610712000">- Fix multilib conflicts in vala-gen-introspect</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.13-1" date="1610798400">- Update to 0.48.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.48.13-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.14-1" date="1614513600">- Update to 0.48.14</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.15-1" date="1616068800">- Update to 0.48.15</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.48.15-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.17-1" date="1620388800">- Update to 0.48.17</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.48.17-2" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.19-1" date="1629633600">- Update to 0.48.19</changelog>
</package>
<package pkgid="b3048401d1ecbbcd210e48d9de1706ee9f564388c72f4d7a4c67ca543bda3dd4" name="valadoc-devel" arch="aarch64">
  <version epoch="0" ver="0.48.19" rel="1.el9"/>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.12-1" date="1605787200">- Update to 0.48.12</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.12-2" date="1610712000">- Fix multilib conflicts in vala-gen-introspect</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.13-1" date="1610798400">- Update to 0.48.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.48.13-2" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.14-1" date="1614513600">- Update to 0.48.14</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.15-1" date="1616068800">- Update to 0.48.15</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.48.15-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.17-1" date="1620388800">- Update to 0.48.17</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 0.48.17-2" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 0.48.19-1" date="1629633600">- Update to 0.48.19</changelog>
</package>
<package pkgid="2be7ecb88815e8a94abd1b55d7d781592c7a1e33e9c3311bc3b10b2512037f14" name="valkey-compat-redis" arch="noarch">
  <version epoch="0" ver="8.0.7" rel="1.el9_7"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.2.5-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.6.1" date="1722945600">- rebase to 7.2.6
- merge limit.conf in main service files
- drop /etc/sysconfig/valkey
- rename compat package
- fix working dir
- partially enable upstream test suite</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.2.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.0.2.1" date="1737633600">- rebase to 8.0.2
  Resolves: RHEL-73273</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.0.3.1" date="1745496000">- rebase to 8.0.3</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-1" date="1752667200">- rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-2" date="1754049600">- fix ImageMode: add tmpfiles.d entries for directories below /var</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-3" date="1757419200">- fix ImageMode: ensure ownership of /etc/valkey</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.6-2" date="1760702400">- rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 8.0.7-1" date="1771934400">- Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733</changelog>
</package>
<package pkgid="854eb8c8fbfe4d240546d591a57ee9f3551f390cdfd92c6b2d4287ce48ea626b" name="valkey-compat-redis" arch="noarch">
  <version epoch="0" ver="8.0.9" rel="1.el9_8"/>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 7.2.6.1" date="1722945600">- rebase to 7.2.6
- merge limit.conf in main service files
- drop /etc/sysconfig/valkey
- rename compat package
- fix working dir
- partially enable upstream test suite</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 7.2.6-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.0.2.1" date="1737633600">- rebase to 8.0.2
  Resolves: RHEL-73273</changelog>
  <changelog author="Remi Collet &lt;rcollet@redhat.com&gt; - 8.0.3.1" date="1745496000">- rebase to 8.0.3</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-1" date="1752667200">- rebase to 8.0.4 for CVE-2025-27151 CVE-2025-48367 and CVE-2025-32023</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-2" date="1754049600">- fix ImageMode: add tmpfiles.d entries for directories below /var</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.4-3" date="1757419200">- fix ImageMode: ensure ownership of /etc/valkey</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 8.0.6-2" date="1760702400">- rebase to 8.0.6 for CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 CVE-2025-46819</changelog>
  <changelog author="Lukas Javorsky &lt;ljavorsk@redhat.com&gt; - 8.0.7-1" date="1772452800">- Rebase to 8.0.7 for CVE-2026-21863 CVE-2025-67733</changelog>
  <changelog author="Petr Khartskhaev &lt;pkhartsk@redhat.com&gt; - 8.0.9-1" date="1779192000">- Rebase to 8.0.9 for CVE-2026-23479 CVE-2026-25243 CVE-2026-23631</changelog>
</package>
<package pkgid="1af2e4282b18817f3edd55319df47eab1b7ce4e422b64a2f0da0fafd4156cd6a" name="velocity" arch="noarch">
  <version epoch="0" ver="1.7" rel="39.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7-31" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7-32" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7-33" date="1599825600">- Default to JDK logging and drop commons-logging and log4j12 implementations.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7-34" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7-35" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-36" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-37" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7-38" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-39" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="6c8d490df97b453f8f7c728994b1c56fb173752ee70fa21d8e3400ad7d285566" name="velocity" arch="noarch">
  <version epoch="0" ver="2.3" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-40" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-41" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.3-1" date="1692964800">- Update to upstream version 2.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.3-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3-3" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.3-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.3-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.3-6" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3-7" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.3-14" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="891f1e4bed7cfe698eef26db04550dfcc2b88758b34a906c4da9c39a94ba1baa" name="velocity-javadoc" arch="noarch">
  <version epoch="0" ver="1.7" rel="38.el9"/>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 0:1.7-29" date="1594641600">- Ignore test case that fails on Java 11</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 0:1.7-30" date="1594728000">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7-31" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7-32" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7-33" date="1599825600">- Default to JDK logging and drop commons-logging and log4j12 implementations.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7-34" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7-35" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7-36" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7-37" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.7-38" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c8031a7992bc23f59a0f209cf475372a558568571e12bfe4e4de75f00d0637a6" name="velocity-javadoc" arch="noarch">
  <version epoch="0" ver="1.7" rel="39.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7-31" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7-32" date="1596110400">- Port to commons-lang3.</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0:1.7-33" date="1599825600">- Default to JDK logging and drop commons-logging and log4j12 implementations.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:1.7-34" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.7-35" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-36" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-37" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.7-38" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-39" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="9d03ea0fe9f53db820718d30a749a5a297bd9a4b033e3d4f1503760fe7600315" name="velocity-javadoc" arch="noarch">
  <version epoch="0" ver="2.3" rel="17.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-40" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.7-41" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.3-1" date="1692964800">- Update to upstream version 2.3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.3-2" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3-3" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.3-4" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.3-5" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.3-6" date="1717156800">- Switch to a newer patch macro syntax</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3-7" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.3-14" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="fc9f9a09ef0436eeb86727f64e45797f39a1829ae74ada10bc859ae491a7e1ea" name="virt-v2v-bash-completion" arch="noarch">
  <version epoch="1" ver="2.7.1" rel="19.el9_7"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-1" date="1722513600">- Further fixes for QEMU Guest Agent
  resolves: RHEL-49761
- Place Windows firstboot files under C:\Program Files\Guestfs\Firstboot
- Improve debugging output</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-2" date="1722859200">- Document uninstallation of VMware Tools on Windows
  resolves: RHEL-51169</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-3" date="1723118400">- Further fixes for QEMU Guest Agent install &amp; VMware Tools removal
  resolves: RHEL-49761, RHEL-51169</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-4" date="1724760000">- convert: windows: Online all virtio disks at first boot
  resolves: RHEL-55763</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.9-1" date="1725537600">- Rebase to upstream development version 2.5.9
- Fix display of incorrect Windows 11 version
  resolves: RHEL-56784
- Add customization options for post-conversion modification
  resolves: RHEL-55761
- convert: windows: Ignore sriov drivers on virtio-win disk
  resolves: RHEL-56383</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-5" date="1740484800">- Rebase to upstream development version 2.7.1
  resolves: RHEL-56813
- Replace Jansson with json-c
  resolves: RHEL-65296
- Find drivers for win2025 guests
  resolves: RHEL-65010
- in-place: Add new -O option to write inspector XML
  resolves: RHEL-58032
- mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
  resolves: RHEL-77989
- convert: Use yum/apt/... for package removals
  resolves: RHEL-71522
- Fix failure if the kernel-source package is installed in the source VM
  resolves: RHEL-80080</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-16" date="1752840000">- mlcustomize: Remove dnf --verbose option
  resolves: RHEL-83289
- Print blkhash of converted image in virt-v2v debugging output
  resolves: RHEL-85512
- Print nbdcopy command in debug output
  resolves: RHEL-86022
- Turn live domain error into a warning
  resolves: RHEL-88543
- Remove usage of nbdkit-cacheextents-filter
  resolves: RHEL-88857
- Print better mountpoint stats in debug output
  resolves: RHEL-88861
- Remove several ancient, deprecated options
  resolves: RHEL-88866
- New tool: virt-v2v-open
  resolves: RHEL-88985
- Remove virt-v2v -io vddk-noextents=true option
  resolves: RHEL-102618
- Fix installation of drivers on firstboot with pending reboots
  resolves: RHEL-100682</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-17" date="1761825600">- Fix ESP conversion if C:\Windows\Temp has alternate case
  resolves: RHEL-125120</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-18" date="1763380800">- Fix pnputil driver store after conversion
  resolves: RHEL-128776</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-19" date="1765800000">- Remove cache=none
  resolves: RHEL-135832</changelog>
</package>
<package pkgid="68bb7b0ae0f1e86d8943120ac460ce8bb503b903c4410984e55407d44219e8e9" name="virt-v2v-man-pages-ja" arch="noarch">
  <version epoch="1" ver="2.7.1" rel="19.el9_7"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-1" date="1722513600">- Further fixes for QEMU Guest Agent
  resolves: RHEL-49761
- Place Windows firstboot files under C:\Program Files\Guestfs\Firstboot
- Improve debugging output</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-2" date="1722859200">- Document uninstallation of VMware Tools on Windows
  resolves: RHEL-51169</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-3" date="1723118400">- Further fixes for QEMU Guest Agent install &amp; VMware Tools removal
  resolves: RHEL-49761, RHEL-51169</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-4" date="1724760000">- convert: windows: Online all virtio disks at first boot
  resolves: RHEL-55763</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.9-1" date="1725537600">- Rebase to upstream development version 2.5.9
- Fix display of incorrect Windows 11 version
  resolves: RHEL-56784
- Add customization options for post-conversion modification
  resolves: RHEL-55761
- convert: windows: Ignore sriov drivers on virtio-win disk
  resolves: RHEL-56383</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-5" date="1740484800">- Rebase to upstream development version 2.7.1
  resolves: RHEL-56813
- Replace Jansson with json-c
  resolves: RHEL-65296
- Find drivers for win2025 guests
  resolves: RHEL-65010
- in-place: Add new -O option to write inspector XML
  resolves: RHEL-58032
- mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
  resolves: RHEL-77989
- convert: Use yum/apt/... for package removals
  resolves: RHEL-71522
- Fix failure if the kernel-source package is installed in the source VM
  resolves: RHEL-80080</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-16" date="1752840000">- mlcustomize: Remove dnf --verbose option
  resolves: RHEL-83289
- Print blkhash of converted image in virt-v2v debugging output
  resolves: RHEL-85512
- Print nbdcopy command in debug output
  resolves: RHEL-86022
- Turn live domain error into a warning
  resolves: RHEL-88543
- Remove usage of nbdkit-cacheextents-filter
  resolves: RHEL-88857
- Print better mountpoint stats in debug output
  resolves: RHEL-88861
- Remove several ancient, deprecated options
  resolves: RHEL-88866
- New tool: virt-v2v-open
  resolves: RHEL-88985
- Remove virt-v2v -io vddk-noextents=true option
  resolves: RHEL-102618
- Fix installation of drivers on firstboot with pending reboots
  resolves: RHEL-100682</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-17" date="1761825600">- Fix ESP conversion if C:\Windows\Temp has alternate case
  resolves: RHEL-125120</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-18" date="1763380800">- Fix pnputil driver store after conversion
  resolves: RHEL-128776</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-19" date="1765800000">- Remove cache=none
  resolves: RHEL-135832</changelog>
</package>
<package pkgid="c2abe68460e6b61d36a9ba289ce9bea022f6e1d69221b301c5ff76fdc1d7fff4" name="virt-v2v-man-pages-uk" arch="noarch">
  <version epoch="1" ver="2.7.1" rel="19.el9_7"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-1" date="1722513600">- Further fixes for QEMU Guest Agent
  resolves: RHEL-49761
- Place Windows firstboot files under C:\Program Files\Guestfs\Firstboot
- Improve debugging output</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-2" date="1722859200">- Document uninstallation of VMware Tools on Windows
  resolves: RHEL-51169</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-3" date="1723118400">- Further fixes for QEMU Guest Agent install &amp; VMware Tools removal
  resolves: RHEL-49761, RHEL-51169</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.6-4" date="1724760000">- convert: windows: Online all virtio disks at first boot
  resolves: RHEL-55763</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.5.9-1" date="1725537600">- Rebase to upstream development version 2.5.9
- Fix display of incorrect Windows 11 version
  resolves: RHEL-56784
- Add customization options for post-conversion modification
  resolves: RHEL-55761
- convert: windows: Ignore sriov drivers on virtio-win disk
  resolves: RHEL-56383</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-5" date="1740484800">- Rebase to upstream development version 2.7.1
  resolves: RHEL-56813
- Replace Jansson with json-c
  resolves: RHEL-65296
- Find drivers for win2025 guests
  resolves: RHEL-65010
- in-place: Add new -O option to write inspector XML
  resolves: RHEL-58032
- mldrivers/linux_bootloaders.ml: Don't overwrite EFI grub2 wrapper
  resolves: RHEL-77989
- convert: Use yum/apt/... for package removals
  resolves: RHEL-71522
- Fix failure if the kernel-source package is installed in the source VM
  resolves: RHEL-80080</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-16" date="1752840000">- mlcustomize: Remove dnf --verbose option
  resolves: RHEL-83289
- Print blkhash of converted image in virt-v2v debugging output
  resolves: RHEL-85512
- Print nbdcopy command in debug output
  resolves: RHEL-86022
- Turn live domain error into a warning
  resolves: RHEL-88543
- Remove usage of nbdkit-cacheextents-filter
  resolves: RHEL-88857
- Print better mountpoint stats in debug output
  resolves: RHEL-88861
- Remove several ancient, deprecated options
  resolves: RHEL-88866
- New tool: virt-v2v-open
  resolves: RHEL-88985
- Remove virt-v2v -io vddk-noextents=true option
  resolves: RHEL-102618
- Fix installation of drivers on firstboot with pending reboots
  resolves: RHEL-100682</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-17" date="1761825600">- Fix ESP conversion if C:\Windows\Temp has alternate case
  resolves: RHEL-125120</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-18" date="1763380800">- Fix pnputil driver store after conversion
  resolves: RHEL-128776</changelog>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 1:2.7.1-19" date="1765800000">- Remove cache=none
  resolves: RHEL-135832</changelog>
</package>
<package pkgid="069d6316d2885555ad5ac7a75d6b629ca03fffb154f3722eaa4d582d515db9bf" name="vm-dump-metrics-devel" arch="aarch64">
  <version epoch="0" ver="1.2" rel="1.el9"/>
  <changelog author="Nils Koenig &lt;nkoenig@redhat.com&gt; - 1.2-1" date="1770811200">- Updated to upstream version 1.2 plus latest fixes
  resolves: RHEL-148557</changelog>
</package>
<package pkgid="21f6605df54b36c5c7400f04ae3b0ef97ee3de06846a0dfd8e9b0d2ce5bc99c7" name="voikko-tools" arch="aarch64">
  <version epoch="0" ver="4.3" rel="7.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-6" date="1580299200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 4.1.1-7" date="1590494400">- Rebuilt for Python 3.9</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.1.1-8" date="1595937600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Ville-Pekka Vainio &lt;vpvainio AT iki.fi&gt; - 4.3-1" date="1610798400">- Update to 4.3
- Add GPG signature check for the source
- Fix pycached stuff
- Remove old python_provide macro
- Remove ldconfig_scriptlets macro
- Only use VFST for now, HFST can be provided in a later update</changelog>
  <changelog author="Ville-Pekka Vainio &lt;vpvainio AT iki.fi&gt; - 4.3-2" date="1611489600">- Bump release for a new Copr build
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Ville-Pekka Vainio &lt;vpvainio AT iki.fi&gt; - 4.3-3" date="1612094400">- The dictionary data directory will now be /usr/lib/voikko on all architectures
- Create and own /usr/lib/voikko, so different dictionary packages can own the subdirectories there
- This was suggested in the review of the voikko-fi package, see rhbz#1919688
- Use the license macro</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 4.3-4" date="1613736000">- Add Requires: voikko-fi</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.3-5" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mike FABIAN &lt;mfabian@redhat.com&gt; - 4.3-6" date="1626177600">- Resolves: rhbz#1977691 bump release number to add libvoikko-devel package to CRB</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.3-7" date="1628510400">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="8c7e39d715f8812424503edf150f20fd1f175487d8150c9a5d3500e025a2067c" name="wayland-doc" arch="noarch">
  <version epoch="0" ver="1.21.0" rel="1.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.18.0-3" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kalev Lember &lt;klember@redhat.com&gt; - 1.19.0-1" date="1611835200">- Update to 1.19.0
- Switch to meson build system
- Drop old provides</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.19.0-2" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.19.0-3" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Carlos O'Donell &lt;codonell@redhat.com&gt; - 1.19.0-4" date="1629374400">- Rebuilt for libffi 3.4.2 SONAME transition.
  Related: rhbz#1891914</changelog>
  <changelog author="Neal Gompa &lt;ngompa@centosproject.org&gt; - 1.21.0-1" date="1659960000">- Update to 1.21.0
  Resolves: rhbz#2063522</changelog>
</package>
<package pkgid="d9e48d890f2a15d8edccf7ff744443b0f887a062eb25c2ada99ebd45d56c94f5" name="web-assets-devel" arch="noarch">
  <version epoch="0" ver="5" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5-11" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5-12" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5-13" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5-14" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5-15" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="847c88d49774653773b0459d697f8b5533c1cce2e3428b5bda7ff5fd0b229acc" name="web-assets-httpd" arch="noarch">
  <version epoch="0" ver="5" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5-11" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5-12" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5-13" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5-14" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5-15" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="38f3af10b915fadfdfa9cae4d88b83ebce32003299a4533a5d1f80fea0a70eba" name="weldr-client-tests" arch="aarch64">
  <version epoch="0" ver="35.12" rel="4.el9_6"/>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 35.12-1" date="1708516800">- Copy rhel-9.4.json test repository from osbuild-composer
- New release: 35.12 (bcl)
  Resolves: RHEL-1035
- Add support for compose start warning messages (bcl)
- Update documentation urls for new locations (bcl)
- weldr: go fmt changes to a couple comments (bcl)
- weldr: Update ostree test for parentid with no url (bcl)
- Makefile: Turn off seccomp for build-in-podman (bcl)
- composer-cli: Update doc links (simon.steinbeiss)
- docs: fix typo/formatting in HACKING.md (idiez)
- Add release creation documentation (bcl)
- spec: Require createrepo_c for weldr-client-tests package (bcl)
- spec: migrate the license field to SPDX (ondrej)
- Go: Switch to go 1.19 (bcl)
- CI: Update terraform hash (bcl)
- Actions: add workflow for marking and closing stale issues and PRs (thozza)
- workflows: Stop using golint (bcl)
- workflows: Add Go 1.21 and 1.22 to test matrix (bcl)
- workflows: Update to golangci-lint 1.56.2 (bcl)
- workflow: Ignore govulncheck failures (bcl)
- workflow: Switch to testing on go 1.18, 1.19, 1.20 (bcl)
- build(deps): bump actions/setup-go from 3 to 5 (49699333+dependabot[bot])
- build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.8.0 (49699333+dependabot[bot])
- build(deps): bump actions/checkout from 3 to 4 (49699333+dependabot[bot])
- build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.2 (49699333+dependabot[bot])
- build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.4 (49699333+dependabot[bot])</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 35.12-2" date="1708516801">- Add centos 9 repos for testing
  Related: RHEL-1035</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 35.12-3" date="1749470400">- tests: OSTree does not support the qcow2 image type
- Add test repositories for RHEL 9.6 and 9.7
- Rebuild for CVE-2025-22871
  Resolves: RHEL-89344</changelog>
  <changelog author="Brian C. Lane &lt;bcl@redhat.com&gt; - 35.12-4" date="1749643200">- Bump release for y-stream AND z-stream building using
  centpkg build --rhel-target=zstream
  Related: RHEL-89344</changelog>
</package>
<package pkgid="87d93d432a6d44f065021f27a635f74859e604b6c74e597c19b05e28ca3fd6a3" name="wireplumber-devel" arch="aarch64">
  <version epoch="0" ver="0.5.12" rel="1.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.5.10-1" date="1751889600">- Update to version 0.5.10
  Resolves: DESKTOP-2313</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.5.12-1" date="1763726400">- Update to version 0.5.12
  Resolves: RHEL-123624</changelog>
</package>
<package pkgid="30c06a7be5cbb3949ab6c0ca52f61694b85fd2f3181ec015613132995a32ee78" name="wireplumber-doc" arch="aarch64">
  <version epoch="0" ver="0.5.12" rel="1.el9"/>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.5.10-1" date="1751889600">- Update to version 0.5.10
  Resolves: DESKTOP-2313</changelog>
  <changelog author="Wim Taymans &lt;wtaymans@redhat.com&gt; - 0.5.12-1" date="1763726400">- Update to version 0.5.12
  Resolves: RHEL-123624</changelog>
</package>
<package pkgid="137602ec12f5f38befc607e0db43ba4cc07a55bf949b883892b7b909582d3435" name="woff2-tools" arch="aarch64">
  <version epoch="0" ver="1.0.2" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-9" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.0.2-10" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.2-11" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.0.2-12" date="1618833600">- Get rid of all things RPATH</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.0.2-13" date="1623672000">- Add Coverity Scan fixes patch</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.0.2-14" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Eike Rathke &lt;erack@redhat.com&gt; - 1.0.2-15" date="1657022400">- Fix 9.1.0 FTBFS</changelog>
</package>
<package pkgid="55df29f235a7c258676a41cec8fd6a0f0995ab75f2c7a88b148c4f029608d502" name="xalan-j2-manual" arch="noarch">
  <version epoch="0" ver="2.7.2" rel="12.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.2-11" date="1718193600">- Remove proprietary data from source RPM
- Resolves: RHEL-40891</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.2-12" date="1736337600">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="9bdd9b6d120e844599c80c52aa1cff8e543dd82b64fbaa55c5b888b1a331eaed" name="xalan-j2-xsltc" arch="noarch">
  <version epoch="0" ver="2.7.2" rel="12.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.7.2-11" date="1718193600">- Remove proprietary data from source RPM
- Resolves: RHEL-40891</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.7.2-12" date="1736337600">- Rebuild to regenerate auto-requires</changelog>
</package>
<package pkgid="f877eb38e73816ca5d02cceee347db574cb145bc8efb6d6ab0c82c04d3b072d8" name="xbean" arch="noarch">
  <version epoch="0" ver="4.18" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 4.15-6" date="1599652800">- Switch from log4j 1.2 compat package to log4j 1.2 API shim.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.18-1" date="1611662400">- Update to upstream version 4.18</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.15-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.18-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.18-3" date="1624276800">- Enable xbean-finder
- Resolves: rhbz#1969297</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.18-4" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.18-5" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.18-6" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.18-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.18-8" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="19e9b9532f2cdbcf0f2662b19e5787872a65701ec83b6bf6301ba59ab0b835c0" name="xbean-javadoc" arch="noarch">
  <version epoch="0" ver="4.18" rel="5.el9"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.15-4" date="1594468800">- Rebuilt for JDK-11, see https://fedoraproject.org/wiki/Changes/Java11</changelog>
  <changelog author="Mat Booth &lt;mat.booth@redhat.com&gt; - 4.15-5" date="1596024000">- Remove springframework conditionals, the deps are a long time removed from
  Fedora and this simplifies the spec a bit
- Disable unused modules that can't build on JDK 11</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.17-1" date="1596024001">- Update to upsteam version 4.17</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 4.15-6" date="1599652800">- Switch from log4j 1.2 compat package to log4j 1.2 API shim.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.18-1" date="1611662400">- Update to upstream version 4.18</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.15-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.18-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.18-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.18-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 4.18-5" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="e7be45ceb84bed3a30f21562c6acf8df1e6a175c9018ac604521adea1c3e83d9" name="xbean-javadoc" arch="noarch">
  <version epoch="0" ver="4.18" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 4.15-6" date="1599652800">- Switch from log4j 1.2 compat package to log4j 1.2 API shim.</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 4.18-1" date="1611662400">- Update to upstream version 4.18</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.15-7" date="1611748800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.18-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.18-3" date="1624276800">- Enable xbean-finder
- Resolves: rhbz#1969297</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.18-4" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.18-5" date="1635854400">- Set explicit Java compiler source/target levels to 1.7</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.18-6" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.18-7" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.18-8" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="7bd688cb7a7230211f124ffc003f26fb02c6b3131bea233b376e6f59e3aadc3a" name="xdg-desktop-portal-devel" arch="aarch64">
  <version epoch="0" ver="1.12.6" rel="1.el9"/>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.12.1-1" date="1644321600">- Rebase to 1.12.1
Resolves: #2051488</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.12.2-1" date="1648209600">- Update to 1.12.2
- Explicit library Requires should be arch-specific
Resolves: #2068448</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.12.3-1" date="1649073600">- Update to 1.12.3
Resolves: #2068448, #2069328</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.12.4-1" date="1650456000">- Update to 1.12.4
Resolves: #2068448, #2076812</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 1.12.6-1" date="1699963200">- Update to 1.12.6
Resolves: RHEL-16451</changelog>
</package>
<package pkgid="a470394fb672848c16c2c3366550f66a5e600840a7054c5d1b980cdbed6afeab" name="xerces-j2-demo" arch="noarch">
  <version epoch="0" ver="2.12.1" rel="11.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.12.1-7" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.12.1-8" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.12.1-9" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.12.1-10" date="1732363200">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.12.1-11" date="1733313600">- Fix incorrect permissions of xerces-j2-samples.jar</changelog>
</package>
<package pkgid="ffcd95619f3792ebe65bf8a35a70c54ada802b3afc19c62ea417e5c3d3ec9b83" name="xerces-j2-javadoc" arch="noarch">
  <version epoch="0" ver="2.12.1" rel="11.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.12.1-7" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.12.1-8" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.12.1-9" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 2.12.1-10" date="1732363200">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.12.1-11" date="1733313600">- Fix incorrect permissions of xerces-j2-samples.jar</changelog>
</package>
<package pkgid="dc2279bdd791a942905fdfbd52c645b737512dba66dc201919aac4daf359eb14" name="xkbcomp-devel" arch="aarch64">
  <version epoch="0" ver="1.4.4" rel="4.el9"/>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1.4.4-1" date="1604577600">- Split xkbcomp out from xorg-x11-xkb-utils into its own package (#1895770)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.4.4-2" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.4-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.4.4-4" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="565a49580e76426119f76bcfe0b8c85e23fb609d9bc5b5bf73b3064f5ffab337" name="xml-commons-apis-javadoc" arch="noarch">
  <version epoch="0" ver="1.4.01" rel="39.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4.01-37" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4.01-38" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4.01-39" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="aa2ec39832b81be3d852afa00bcc41f9945eb15b2c0c2832f4ddec326bc84d15" name="xml-commons-apis-manual" arch="noarch">
  <version epoch="0" ver="1.4.01" rel="39.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4.01-37" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4.01-38" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.4.01-39" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="691a8783f8180e5ff5e0352d78052b8888478565fd42c375e88e45f93a153425" name="xml-commons-resolver-javadoc" arch="noarch">
  <version epoch="0" ver="1.2" rel="42.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-37" date="1731067200">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-38" date="1732017600">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-39" date="1732190400">- Fix patch usage</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-40" date="1732276800">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.2-41" date="1732363200">- Add noarch to ExclusiveArch</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.2-42" date="1733313600">- Install license files in licensedir instead of docdir</changelog>
</package>
<package pkgid="6c02905f06dcf4a0e966720f05c9015cbda624e0a6b1a033ea20622ad8e3a48f" name="xmlrpc-c-apps" arch="aarch64">
  <version epoch="0" ver="1.51.0" rel="16.el9_0"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-11" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.51.0-12" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.51.0-13" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.51.0-14" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.51.0-15" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Michal Srb &lt;michal@redhat.com&gt; - 1.51.0-16" date="1647518400">- Drop bundled expat and build against libxml2
- Resolves: CVE-2022-25235
- Resolves: CVE-2022-25236</changelog>
</package>
<package pkgid="b21c0128f95f72d205b267bdee7f46c5d4987f4772c642df780610271dd7a98b" name="xmlsec1-gcrypt-devel" arch="aarch64">
  <version epoch="0" ver="1.2.29" rel="13.el9"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.2.29-10" date="1715601600">- Fix memory leaks found by SAST
  Resolves: RHEL-35381</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.2.29-11" date="1715947200">- Add xmlsec1-gnutls dependency on xmlsec1-gcrypt
  Related: RHEL-35381</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.2.29-12" date="1715947201">- Fix double free in xmlSecGCryptAsymKeyDataGenerate
  Related: RHEL-35381</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.2.29-12" date="1716206400">- Fix adopt function the same way as in upstream
  Related: RHEL-35381</changelog>
</package>
<package pkgid="c23ea1b96fda40259f68dc480ad1d7c347238cef732f9d5cd3395e32dd648f0e" name="xmlsec1-nss-devel" arch="aarch64">
  <version epoch="0" ver="1.2.29" rel="13.el9"/>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.2.29-10" date="1715601600">- Fix memory leaks found by SAST
  Resolves: RHEL-35381</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.2.29-11" date="1715947200">- Add xmlsec1-gnutls dependency on xmlsec1-gcrypt
  Related: RHEL-35381</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.2.29-12" date="1715947201">- Fix double free in xmlSecGCryptAsymKeyDataGenerate
  Related: RHEL-35381</changelog>
  <changelog author="Tomas Halman &lt;thalman@redhat.com&gt; - 1.2.29-12" date="1716206400">- Fix adopt function the same way as in upstream
  Related: RHEL-35381</changelog>
</package>
<package pkgid="665e7777f76ca8a7a4ff336a436e12889632187960400f677edea3599f89c600" name="xmlunit" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.0-7" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.0-8" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-9" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-11" date="1709380800">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.1-1" date="1712577600">- Update to upstream version 2.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-1" date="1724414400">- Update to upstream version 2.10.0
- Resolves: rhbz#2277615</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="5d82dbe4c9a392edd7d28e4b4b204875f7927c2de19f3ea741d0bebd81632f23" name="xmlunit" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973721</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-4" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-5" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.2-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-7" date="1650628800">- Disable more tests that require network access</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-8" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="9b52415c4a7931655cf24eda0adfe73e68977a1bd0dd03d4b03004e48c0d5bb0" name="xmlunit-assertj" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.0-7" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.0-8" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-9" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-11" date="1709380800">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.1-1" date="1712577600">- Update to upstream version 2.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-1" date="1724414400">- Update to upstream version 2.10.0
- Resolves: rhbz#2277615</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="29a6a2452aa36431c3f7e79580fd1dcb67beaebce6d66d4111230f37a0d67c6a" name="xmlunit-assertj" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="6.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.7.0-1" date="1596024000">- Update to upstream version 2.7.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.2-1" date="1611662400">- Update to upstream version 2.8.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-5" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973743</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b3fcfc09e436476fae06fbd107417b1ef8b9c7d68fb435dce6a5ca3755774777" name="xmlunit-assertj" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973721</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-4" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-5" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.2-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-7" date="1650628800">- Disable more tests that require network access</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-8" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="586d5959b88a1803b4930e4c552c63159b3e3a546c370428d545e88fc3b6e126" name="xmlunit-core" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.0-7" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.0-8" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-9" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-11" date="1709380800">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.1-1" date="1712577600">- Update to upstream version 2.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-1" date="1724414400">- Update to upstream version 2.10.0
- Resolves: rhbz#2277615</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="fca1c114186831ebed1be00b3e3fe349b51f8be82b958c82b04bb87fce83dee7" name="xmlunit-core" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="6.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.7.0-1" date="1596024000">- Update to upstream version 2.7.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.2-1" date="1611662400">- Update to upstream version 2.8.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-5" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973743</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="5c74d9041d6ebe4def527a23b15aa7da30eadad9aadcd26758d28ca2f8bcc021" name="xmlunit-core" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973721</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-4" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-5" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.2-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-7" date="1650628800">- Disable more tests that require network access</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-8" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="efc2566d21c735f370ee1c44cb253abcd22021f111e33a48cf35e279b6477218" name="xmlunit-javadoc" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.0-7" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.0-8" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-9" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-11" date="1709380800">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.1-1" date="1712577600">- Update to upstream version 2.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-1" date="1724414400">- Update to upstream version 2.10.0
- Resolves: rhbz#2277615</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="11e52541476c1015f23a92e1dab66ae24a01436e76c7eaa61b01264f0fd17b7b" name="xmlunit-javadoc" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="6.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.7.0-1" date="1596024000">- Update to upstream version 2.7.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.2-1" date="1611662400">- Update to upstream version 2.8.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-5" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973743</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="846892ad46c391e6fe51914c99c1ad6ffa74d1d500ba064d89f8bc700758f2b5" name="xmlunit-javadoc" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973721</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-4" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-5" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.2-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-7" date="1650628800">- Disable more tests that require network access</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-8" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="d3cc4c456b0d1f23dd81abf2c6d7bbc32daecfe12a975ace6632c18683dc254f" name="xmlunit-legacy" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.0-7" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.0-8" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-9" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-11" date="1709380800">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.1-1" date="1712577600">- Update to upstream version 2.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-1" date="1724414400">- Update to upstream version 2.10.0
- Resolves: rhbz#2277615</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="1201fc6d58e934e63a5c35e310e78ef3fa79b4794419c31703a662b959628e1d" name="xmlunit-legacy" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="6.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.7.0-1" date="1596024000">- Update to upstream version 2.7.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.2-1" date="1611662400">- Update to upstream version 2.8.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-5" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973743</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="958b63f0e9aa32547d7e0a03df2cfbd7f84ec79c837e7d6638a5090c55d3c26d" name="xmlunit-legacy" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973721</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-4" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-5" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.2-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-7" date="1650628800">- Disable more tests that require network access</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-8" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="49480303f456c4b98a1a67ce5dc08c8abc304c6443d22a948cde6af5e8d6c614" name="xmlunit-matchers" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.0-7" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.0-8" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-9" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-11" date="1709380800">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.1-1" date="1712577600">- Update to upstream version 2.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-1" date="1724414400">- Update to upstream version 2.10.0
- Resolves: rhbz#2277615</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="303890bd563c14f74d081ad6383ca20fca966b1b69e85cc753534068cbfe5379" name="xmlunit-matchers" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="6.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.7.0-1" date="1596024000">- Update to upstream version 2.7.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.2-1" date="1611662400">- Update to upstream version 2.8.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-5" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973743</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="7952b22b87f0bb42df803f5b3d43d7f5b0df4c17eb74d1e0f1d95f78a872f008" name="xmlunit-matchers" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973721</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-4" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-5" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.2-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-7" date="1650628800">- Disable more tests that require network access</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-8" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="ccd1749187c4946ef978bd2eb7b985ef49cbda547479a60bfcea68a4d9a46543" name="xmlunit-placeholders" arch="noarch">
  <version epoch="0" ver="2.10.0" rel="5.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.9.0-6" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.0-7" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.0-8" date="1708430400">- Update Java source/target to 1.8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-9" date="1708689600">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.9.0-11" date="1709380800">- bump of release for for java-21-openjdk as system jdk</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.9.1-1" date="1712577600">- Update to upstream version 2.9.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.9.1-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-1" date="1724414400">- Update to upstream version 2.10.0
- Resolves: rhbz#2277615</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.10.0-2" date="1732881600">- Update javapackages test plan to f42</changelog>
</package>
<package pkgid="f45cae08510d55e934289cd1f8f040a1402528369b1b42bf5cfa573e8270870d" name="xmlunit-placeholders" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="6.el9"/>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.7.0-1" date="1596024000">- Update to upstream version 2.7.0</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 2.8.2-1" date="1611662400">- Update to upstream version 2.8.2</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1623153600">- Bootstrap Maven for CentOS Stream 9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-4" date="1623240000">- Rebuild to workaround DistroBaker issue</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-5" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973743</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 2.8.2-6" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="b8345c9eca742740d5285fd9bcc5dcf1441b3a6609a96d848af33c19b6a5b88f" name="xmlunit-placeholders" arch="noarch">
  <version epoch="0" ver="2.8.2" rel="8.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0:2.7.0-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-6" date="1611921600">- Fix FTBFS by patching ValueAssertTest to adjust for changed format of
  mismatched string exception</changelog>
  <changelog author="Merlin Mathesius &lt;mmathesi@redhat.com&gt; - 0:2.7.0-7" date="1612440000">- Update previous patch to use improved version that was merged upstream</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-2" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-3" date="1624017600">- Clean tarball from content with questionable licensing
- Resolves: rhbz#1973721</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-4" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-5" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 2.8.2-6" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 2.8.2-7" date="1650628800">- Disable more tests that require network access</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.8.2-8" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="b0d880408db014c15571acd85984769384b9a43ba711f9e995cf8b0c0a6f7102" name="xmvn" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-1" date="1627300800">- Update to upstream version 4.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-2" date="1632657600">- Rebuild to update libjansi.so symlink</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-3" date="1635940800">- Workaround build issue with OpenJDK 17
- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-4" date="1636372800">- For now keep suggesting OpenJDK 11 Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-5" date="1642161600">- Rebuild for Maven 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-6" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-7" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.0-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-9" date="1650628800">- Port to Modello 2.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-10" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="343257499d5b7963df26a1c3a451adcdc4f703f6258f5514ba0e5c82ece5b93d" name="xmvn" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="3.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-3" date="1733832000">- Add bindings for XMvn toolchains
- Resolves: RHEL-70855, RHEL-70860
- Related: RHEL-71057</changelog>
</package>
<package pkgid="ef8a7a1a807aa39e01c58fecf26427135f5b017fd82a8dabd80ff27ed0c47978" name="xmvn" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="11.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-9" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-10" date="1722340800">- Remove workaround for rpm bug 447156</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-11" date="1724155200">- Rebuild for Sisu 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-21" date="1724414400">- Port to commons-compress 1.27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-1" date="1727438400">- Update to upstream version 4.3.0
- Resolves: rhbz#2315092</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-2" date="1728302400">- Remove dependency on which</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-3" date="1732276800">- Add bindings for XMvn toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-4" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-5" date="1733918400">- Specify smoke test requirements</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-6" date="1734523200">- Update xmvn-minimal Requires</changelog>
</package>
<package pkgid="c27fa47f4e0a17c5c91797987e7ae892c23f3ba22f3f287f836405174a706c3a" name="xmvn-core" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-1" date="1627300800">- Update to upstream version 4.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-2" date="1632657600">- Rebuild to update libjansi.so symlink</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-3" date="1635940800">- Workaround build issue with OpenJDK 17
- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-4" date="1636372800">- For now keep suggesting OpenJDK 11 Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-5" date="1642161600">- Rebuild for Maven 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-6" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-7" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.0-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-9" date="1650628800">- Port to Modello 2.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-10" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="154094105ae0a600c3b7efea1aa05b1a12241da8a4113d2fb18406e82a8b8390" name="xmvn-core" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="11.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-9" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-10" date="1722340800">- Remove workaround for rpm bug 447156</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-11" date="1724155200">- Rebuild for Sisu 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-21" date="1724414400">- Port to commons-compress 1.27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-1" date="1727438400">- Update to upstream version 4.3.0
- Resolves: rhbz#2315092</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-2" date="1728302400">- Remove dependency on which</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-3" date="1732276800">- Add bindings for XMvn toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-4" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-5" date="1733918400">- Specify smoke test requirements</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-6" date="1734523200">- Update xmvn-minimal Requires</changelog>
</package>
<package pkgid="edadc40c59f9c5016498857a4243e2ca6dcc2623fc8f83b77d1b669f594a63ff" name="xmvn-javadoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-1" date="1627300800">- Update to upstream version 4.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-2" date="1632657600">- Rebuild to update libjansi.so symlink</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-3" date="1635940800">- Workaround build issue with OpenJDK 17
- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-4" date="1636372800">- For now keep suggesting OpenJDK 11 Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-5" date="1642161600">- Rebuild for Maven 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-6" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-7" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.0-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-9" date="1650628800">- Port to Modello 2.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-10" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="8ca292fdfc107bec98c7f425fd527aa2ea7515d6857419ebbb873245df6c5907" name="xmvn-javadoc" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="3.el9"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-3" date="1733832000">- Add bindings for XMvn toolchains
- Resolves: RHEL-70855, RHEL-70860
- Related: RHEL-71057</changelog>
</package>
<package pkgid="f7b0c05abc68e008d0250d26131d595fb2b7f129b68e781c350cf2ce30faabae" name="xmvn-javadoc" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="11.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-9" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-10" date="1722340800">- Remove workaround for rpm bug 447156</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-11" date="1724155200">- Rebuild for Sisu 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-21" date="1724414400">- Port to commons-compress 1.27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-1" date="1727438400">- Update to upstream version 4.3.0
- Resolves: rhbz#2315092</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-2" date="1728302400">- Remove dependency on which</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-3" date="1732276800">- Add bindings for XMvn toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-4" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-5" date="1733918400">- Specify smoke test requirements</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-6" date="1734523200">- Update xmvn-minimal Requires</changelog>
</package>
<package pkgid="693f42e0145466e76ac39cbdd27f6232c687bebce236d0a3a3dba628fe875e51" name="xmvn-minimal" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-1" date="1627300800">- Update to upstream version 4.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-2" date="1632657600">- Rebuild to update libjansi.so symlink</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-3" date="1635940800">- Workaround build issue with OpenJDK 17
- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-4" date="1636372800">- For now keep suggesting OpenJDK 11 Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-5" date="1642161600">- Rebuild for Maven 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-6" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-7" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.0-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-9" date="1650628800">- Port to Modello 2.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-10" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="67fc0990c346d57415e249d8f9d07a6fa5d5968e78c97698a67e83f1fb0412d7" name="xmvn-minimal" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="11.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-9" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-10" date="1722340800">- Remove workaround for rpm bug 447156</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-11" date="1724155200">- Rebuild for Sisu 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-21" date="1724414400">- Port to commons-compress 1.27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-1" date="1727438400">- Update to upstream version 4.3.0
- Resolves: rhbz#2315092</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-2" date="1728302400">- Remove dependency on which</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-3" date="1732276800">- Add bindings for XMvn toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-4" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-5" date="1733918400">- Specify smoke test requirements</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-6" date="1734523200">- Update xmvn-minimal Requires</changelog>
</package>
<package pkgid="5d5e54040614b22783c36740d16cabc09e01f93b60e4d64dcdcc041960fced0a" name="xmvn-mojo" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-1" date="1627300800">- Update to upstream version 4.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-2" date="1632657600">- Rebuild to update libjansi.so symlink</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-3" date="1635940800">- Workaround build issue with OpenJDK 17
- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-4" date="1636372800">- For now keep suggesting OpenJDK 11 Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-5" date="1642161600">- Rebuild for Maven 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-6" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-7" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.0-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-9" date="1650628800">- Port to Modello 2.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-10" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="e6965c18d6bd45f78b8216ac1a53542189d2ee1f76116e7a7a903438cbc753dd" name="xmvn-mojo" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="11.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-9" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-10" date="1722340800">- Remove workaround for rpm bug 447156</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-11" date="1724155200">- Rebuild for Sisu 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-21" date="1724414400">- Port to commons-compress 1.27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-1" date="1727438400">- Update to upstream version 4.3.0
- Resolves: rhbz#2315092</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-2" date="1728302400">- Remove dependency on which</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-3" date="1732276800">- Add bindings for XMvn toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-4" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-5" date="1733918400">- Specify smoke test requirements</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-6" date="1734523200">- Update xmvn-minimal Requires</changelog>
</package>
<package pkgid="7821f853598791b9f0c77243c02df7475bec44d970af25af07fbdc5b54754be2" name="xmvn-toolchain-openjdk21" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="11.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-9" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-10" date="1722340800">- Remove workaround for rpm bug 447156</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-11" date="1724155200">- Rebuild for Sisu 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-21" date="1724414400">- Port to commons-compress 1.27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-1" date="1727438400">- Update to upstream version 4.3.0
- Resolves: rhbz#2315092</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-2" date="1728302400">- Remove dependency on which</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-3" date="1732276800">- Add bindings for XMvn toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-4" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-5" date="1733918400">- Specify smoke test requirements</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-6" date="1734523200">- Update xmvn-minimal Requires</changelog>
</package>
<package pkgid="ce58bfbef9022834217e66fc883d45e81655dc9ec7cdf06a15b9f6ac4f46bf26" name="xmvn-tools" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="10.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-1" date="1627300800">- Update to upstream version 4.0.0</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-2" date="1632657600">- Rebuild to update libjansi.so symlink</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-3" date="1635940800">- Workaround build issue with OpenJDK 17
- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-4" date="1636372800">- For now keep suggesting OpenJDK 11 Maven binding</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-5" date="1642161600">- Rebuild for Maven 3.8.4</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-6" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-7" date="1643284800">- Suggest OpenJDK 17 as default Maven binding</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 4.0.0-8" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.0.0-9" date="1650628800">- Port to Modello 2.0.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.0.0-10" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="89be08927cfc753fb7aabddc69e20e41d08bde6e9b82beefba439edbee842e08" name="xmvn-tools" arch="noarch">
  <version epoch="0" ver="4.3.0" rel="11.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.2.0-9" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-10" date="1722340800">- Remove workaround for rpm bug 447156</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-11" date="1724155200">- Rebuild for Sisu 0.9.0.M3</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.2.0-21" date="1724414400">- Port to commons-compress 1.27</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-1" date="1727438400">- Update to upstream version 4.3.0
- Resolves: rhbz#2315092</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-2" date="1728302400">- Remove dependency on which</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-3" date="1732276800">- Add bindings for XMvn toolchains</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-4" date="1732881600">- Drop explicit requires on javapackages-tools</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-5" date="1733918400">- Specify smoke test requirements</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 4.3.0-6" date="1734523200">- Update xmvn-minimal Requires</changelog>
</package>
<package pkgid="d33ac892ffe4a629e2ded981e3a7e6264070d2fdfc4ae57fad9b03bfc9d04740" name="xorg-x11-font-utils" arch="aarch64">
  <version epoch="1" ver="7.5" rel="53.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.5-44" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.5-45" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; - 1:7.5-46" date="1604571997">- Add BuildRequires for make</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1:7.5-47" date="1608120000">- fonttosfnt 1.2.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:7.5-48" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Neal Gompa &lt;ngompa13@gmail.com&gt; - 1:7.5-49" date="1613908800">- Add OrderWithRequires for freetype to ensure freetype is installed first
- Move license files to license tag on file list</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1:7.5-50" date="1614081600">- Update to mkfontscale 1.2.1 which obsoletes the separate mkfontdir.</changelog>
  <changelog author="Peter Hutterer &lt;peter.hutterer@redhat.com&gt; 1:7.5-51" date="1614254400">- Drop bdftopcf, mkfontscale and fonttosfnt, they are in separate packages
  now (#1932731)</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:7.5-52" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1:7.5-53" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="a85a920739f971fb72001e12938426ad2f7a846ad975f903af08395e94618ec9" name="xz-java" arch="noarch">
  <version epoch="0" ver="1.9" rel="22.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-5" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-6" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-8" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.9-9" date="1708516800">- Set OpenJDK version to 8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.9-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-11" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9-20" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9-21" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="02396bda62030185774d45d0d2671ca0dd88e7cef86e9fe56293139397607b17" name="xz-java" arch="noarch">
  <version epoch="0" ver="1.9" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-9" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-10" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Nicolas De Amicis &lt;deamicis@bluewin.ch&gt; - 1.9-11" date="1619092800">- Rebuild for new version 1.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8-11" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-12" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.9-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="85cba4278faf95001d3d40a524b347ac14c8b3c51836c93c53283b4e80d84eff" name="xz-java-javadoc" arch="noarch">
  <version epoch="0" ver="1.8" rel="20.el9"/>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.8-15" date="1732104000">- Rebuild with regenerated Requires on Java</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.8-16" date="1732276800">- Rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.8-17" date="1732276801">- Rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.8-18" date="1732276802">- Rebuild</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.8-19" date="1732276803">- Disable building on i686</changelog>
  <changelog author="Mari&#xE1;n Kon&#x10D;ek &lt;mkoncek@redhat.com&gt; - 1.8-20" date="1732363200">- Add noarch to ExclusiveArch</changelog>
</package>
<package pkgid="c7a3183ffa283a7198a1a220b7584bf8071d93b31bb0d9a33dae6a5f7bcb5ab4" name="xz-java-javadoc" arch="noarch">
  <version epoch="0" ver="1.9" rel="22.module_el9.6.0+143+4fb1716e"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-5" date="1674302400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-6" date="1690027200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9-7" date="1693569600">- Convert License tag to SPDX format</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-8" date="1706356800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Marian Koncek &lt;mkoncek@redhat.com&gt; - 1.9-9" date="1708516800">- Set OpenJDK version to 8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.9-10" date="1709035200">- Rebuilt for java-21-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-11" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9-20" date="1732881600">- Update javapackages test plan to f42</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.9-21" date="1735560000">- Use %autosetup -C</changelog>
</package>
<package pkgid="936f5c2e6742b943f1bb8de5780b1df9d8c8985e2a8c54d123691880f7105035" name="xz-java-javadoc" arch="noarch">
  <version epoch="0" ver="1.9" rel="4.module_el9.1.0+11+ae49fe6f"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-9" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-10" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Nicolas De Amicis &lt;deamicis@bluewin.ch&gt; - 1.9-11" date="1619092800">- Rebuild for new version 1.9</changelog>
  <changelog author="Mikolaj Izdebski &lt;mizdebsk@redhat.com&gt; - 1.8-11" date="1621252800">- Bootstrap build
- Non-bootstrap build</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.8-12" date="1627041600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-2" date="1642852800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1.9-3" date="1644062400">- Rebuilt for java-17-openjdk as system jdk</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9-4" date="1658577600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
</package>
<package pkgid="51c30bdfbf61f3a4d1ece083265c1eb37f4597100141ba5bacdb5d950d377a6f" name="xz-static" arch="aarch64">
  <version epoch="0" ver="5.2.5" rel="8.el9_0"/>
  <changelog author="Richard W.M. Jones &lt;rjones@redhat.com&gt; - 5.2.5-2" date="1591617600">- Fix location of German man pages (RHBZ#1844813).</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Ondrej Dubaj &lt;odubaj@redhat.com&gt; - 5.2.5-4" date="1609761600">- Enabled CET for i686 (#1910368)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.2.5-5" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.2.5-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Matej Mu&#x17E;ila &lt;mmuzila@redhat.com&gt; - 5.2.5-8" date="1653998400">- Fix arbitrary file write vulnerability
  Resolves: CVE-2022-1271</changelog>
</package>
<package pkgid="6576f0335abfff9ffb99e236b32ee5ccf5e158df812e1d24db3e3bd0a25ce569" name="yara-doc" arch="noarch">
  <version epoch="0" ver="4.5.2" rel="1.el9"/>
  <changelog author="Mark Huth &lt;mhuth@redhat.com&gt; - 4.5.2-1" date="1728475200">- bump to 4.5.2
- remove pcre build dependency</changelog>
</package>
<package pkgid="54852aa20b34f4818af114b511dddff690e3edefe49b9d557495997c74c900a2" name="yasm" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-11" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-12" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-13" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.0-14" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.0-15" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="da490536a76811a0c396d000d88d6163f10ccd47d88c3c2466d6d98cc9ff2fd3" name="yasm-devel" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="15.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-11" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-12" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.0-13" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.0-14" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.3.0-15" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
</package>
<package pkgid="c143fba368dd34b58c5c8ed5df2d2effd1d36b5e102cf4176c815e31c21982a3" name="yelp-xsl-devel" arch="noarch">
  <version epoch="0" ver="40.2" rel="1.el9_6.1"/>
  <changelog author="David King &lt;dking@redhat.com&gt; - 40.2-1.1" date="1745409600">- Fix CVE-2025-3155 (RHEL-85926)</changelog>
</package>
<package pkgid="250d1125055a2783dc3ca3b3b2db4fc32c38a61ade84e9101e0a141b2404724f" name="yggdrasil" arch="aarch64">
  <version epoch="0" ver="0.4.1" rel="1.el9"/>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 0.4.1-1" date="1713182400">- Initial package (RHEL-29800)</changelog>
</package>
<package pkgid="11200fb2bf76494db3d1f8586950a706f7a03179cc42ae32247ce2724ef28b94" name="yggdrasil-worker-package-manager" arch="aarch64">
  <version epoch="0" ver="0.2.2" rel="2.el9"/>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 0.2.2-1" date="1720440000">- Initial package (RHEL-29802)</changelog>
  <changelog author="Link Dupont &lt;link@redhat.com&gt; - 0.2.2-2" date="1720526400">- Drop generation of automatic Go source package</changelog>
</package>
<package pkgid="278601ad1fd2d552d51ca4bafbbac04796895e542f9b5e897dbd104f94bb166f" name="zchunk" arch="aarch64">
  <version epoch="0" ver="1.1.9" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-3" date="1564228800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@gmail.com&gt; - 1.1.4-1" date="1573646400">- Fix download failure when web server doesn't include content-type with each
  range</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@gmail.com&gt; - 1.1.5-1" date="1579348800">- Fix small bug in corner case when handling write failures</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@gmail.com&gt; - 1.1.9-1" date="1609329600">- Fixes for test failures with zstd-1.4.7+
- Add man pages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.9-2" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.9-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.9-4" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
</package>
<package pkgid="38ff73c99d1a1f1a18af20fc84a536e2b2d381ce9577f14e725bcba4bb615584" name="zchunk-devel" arch="aarch64">
  <version epoch="0" ver="1.1.9" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-3" date="1564228800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@gmail.com&gt; - 1.1.4-1" date="1573646400">- Fix download failure when web server doesn't include content-type with each
  range</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@gmail.com&gt; - 1.1.5-1" date="1579348800">- Fix small bug in corner case when handling write failures</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@gmail.com&gt; - 1.1.9-1" date="1609329600">- Fixes for test failures with zstd-1.4.7+
- Add man pages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.9-2" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.9-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.9-4" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
</package>
<package pkgid="3dc1a03134db2540dcbe6a289bfd182a8e98d654abb9bbb341b073358dbc1dca" name="zchunk-libs" arch="aarch64">
  <version epoch="0" ver="1.1.9" rel="4.el9"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.2-3" date="1564228800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@gmail.com&gt; - 1.1.4-1" date="1573646400">- Fix download failure when web server doesn't include content-type with each
  range</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@gmail.com&gt; - 1.1.5-1" date="1579348800">- Fix small bug in corner case when handling write failures</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-2" date="1580472000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.5-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@gmail.com&gt; - 1.1.9-1" date="1609329600">- Fixes for test failures with zstd-1.4.7+
- Add man pages</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.9-2" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.9-3" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 1.1.9-4" date="1623844800">- Rebuilt for RHEL 9 BETA for openssl 3.0
  Related: rhbz#1971065</changelog>
</package>
<package pkgid="2b2f463da50202a0bee013f5c07a860358a9e43564c113db0169bf072f6c3f14" name="zsh-html" arch="noarch">
  <version epoch="0" ver="5.8" rel="9.el9"/>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.8-1" date="1582545600">- update to latest upstream release</changelog>
  <changelog author="Tom Stellard &lt;tstellar@redhat.com&gt; - 5.8-2" date="1594728000">- Use make macros
- https://fedoraproject.org/wiki/Changes/UseMakeBuildInstallMacro</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8-3" date="1596024000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.8-4" date="1611835200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.8-5" date="1616673600">- complete file arguments after rpmbuild -r/-b/-t</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.8-6" date="1618574400">- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937</changelog>
  <changelog author="Mohan Boddu &lt;mboddu@redhat.com&gt; - 5.8-7" date="1628596800">- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
  Related: rhbz#1991688</changelog>
  <changelog author="Debarshi Ray &lt;rishi@fedoraproject.org&gt; - 5.8-8" date="1637841600">- Overwrite PROMPT only if it's set to the built-in default (#2026749)</changelog>
  <changelog author="Kamil Dudka &lt;kdudka@redhat.com&gt; - 5.8-9" date="1645531200">- do not perform PROMPT_SUBST evaluation on %F/%K arguments (CVE-2021-45444)</changelog>
</package>
</otherdata>